/usr/src/sbin/restore/interactive.c

Bug Summary

File:	src/sbin/restore/interactive.c
Warning:	line 680, column 5 4th function call argument is an uninitialized value

Annotated Source Code

Press '?' to see keyboard shortcuts

Show analyzer invocation

clang -cc1 -cc1 -triple amd64-unknown-openbsd7.0 -analyze -disable-free -disable-llvm-verifier -discard-value-names -main-file-name interactive.c -analyzer-store=region -analyzer-opt-analyze-nested-blocks -analyzer-checker=core -analyzer-checker=apiModeling -analyzer-checker=unix -analyzer-checker=deadcode -analyzer-checker=security.insecureAPI.UncheckedReturn -analyzer-checker=security.insecureAPI.getpw -analyzer-checker=security.insecureAPI.gets -analyzer-checker=security.insecureAPI.mktemp -analyzer-checker=security.insecureAPI.mkstemp -analyzer-checker=security.insecureAPI.vfork -analyzer-checker=nullability.NullPassedToNonnull -analyzer-checker=nullability.NullReturnedFromNonnull -analyzer-output plist -w -setup-static-analyzer -mrelocation-model pic -pic-level 1 -pic-is-pie -mframe-pointer=all -relaxed-aliasing -fno-rounding-math -mconstructor-aliases -munwind-tables -target-cpu x86-64 -target-feature +retpoline-indirect-calls -target-feature +retpoline-indirect-branches -tune-cpu generic -debugger-tuning=gdb -fcoverage-compilation-dir=/usr/src/sbin/restore/obj -resource-dir /usr/local/lib/clang/13.0.0 -D RRESTORE -internal-isystem /usr/local/lib/clang/13.0.0/include -internal-externc-isystem /usr/include -O2 -fdebug-compilation-dir=/usr/src/sbin/restore/obj -ferror-limit 19 -fwrapv -D_RET_PROTECTOR -ret-protector -fgnuc-version=4.2.1 -vectorize-loops -vectorize-slp -fno-builtin-malloc -fno-builtin-calloc -fno-builtin-realloc -fno-builtin-valloc -fno-builtin-free -fno-builtin-strdup -fno-builtin-strndup -analyzer-output=html -faddrsig -D__GCC_HAVE_DWARF2_CFI_ASM=1 -o /home/ben/Projects/vmm/scan-build/2022-01-12-194120-40624-1 -x c /usr/src/sbin/restore/interactive.c

1/*	$OpenBSD: interactive.c,v 1.30 2015/01/20 18:22:21 deraadt Exp $	*/
2/*	$NetBSD: interactive.c,v 1.10 1997/03/19 08:42:52 lukem Exp $	*/

4/*
* Copyright (c) 1985, 1993
*	The Regents of the University of California.  All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
* 1. Redistributions of source code must retain the above copyright
*    notice, this list of conditions and the following disclaimer.
* 2. Redistributions in binary form must reproduce the above copyright
*    notice, this list of conditions and the following disclaimer in the
*    documentation and/or other materials provided with the distribution.
* 3. Neither the name of the University nor the names of its contributors
*    may be used to endorse or promote products derived from this software
*    without specific prior written permission.
*
* THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
* ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
* SUCH DAMAGE.
*/

33#include <sys/time.h>
34#include <sys/stat.h>

36#include <ufs/ffs/fs.h>
37#include <ufs/ufs/dinode.h>
38#include <ufs/ufs/dir.h>
39#include <protocols/dumprestore.h>

41#include <setjmp.h>
42#include <glob.h>
43#include <stdio.h>
44#include <errno(*__errno()).h>
45#include <stdlib.h>
46#include <string.h>
47#include <unistd.h>
48#include <limits.h>

50#include "restore.h"
51#include "extern.h"

53#define round(a, b)(((a) + (b) - 1) / (b) * (b)) (((a) + (b) - 1) / (b) * (b))

55/*
* Things to handle interruptions.
*/
58static int runshell;
59static jmp_buf reset;
60static char *nextarg = NULL((void *)0);

62/*
* Structure and routines associated with listing directories.
*/
65struct afile {
ino_t	fnum;		/* inode number of file */
char	*fname;		/* file name */
short	len;		/* name length */
char	prefix;		/* prefix character */
char	postfix;	/* postfix character */
71};
72struct arglist {
int	freeglob;	/* glob structure needs to be freed */
int	argcnt;		/* next globbed argument to return */
glob_t	glob;		/* globbing information */
char	*cmd;		/* the current command */
77};

79static char	*copynext(char *, char *);
80static int	 fcmp(const void *, const void *);
81static void	 formatf(struct afile *, int);
82static void	 getcmd(char *, char *, size_t, char *, size_t, struct arglist *);
83struct dirent	*glob_readdir(RST_DIR *dirp);
84static int	 glob_stat(const char *, struct stat *);
85static void	 mkentry(char *, struct direct *, struct afile *);
86static void	 printlist(char *, char *);

88/*
* Read and execute commands from the terminal.
*/
91void
92runcmdshell(void)
93{
struct entry *np;
ino_t ino;
struct arglist arglist;
char curdir[PATH_MAX1024];
char name[PATH_MAX1024];
char cmd[BUFSIZ1024];

arglist.freeglob = 0;
arglist.argcnt = 0;
arglist.glob.gl_flags = GLOB_ALTDIRFUNC0x0040;
arglist.glob.gl_opendir = (void *)rst_opendir;
arglist.glob.gl_readdir = (void *)glob_readdir;
arglist.glob.gl_closedir = (void *)rst_closedir;
arglist.glob.gl_lstat = glob_stat;
arglist.glob.gl_stat = glob_stat;
canon("/", curdir, sizeof curdir);
110loop:
if (setjmp(reset) != 0) {
1
Assuming the condition is false→
2
←
Taking false branch→
if (arglist.freeglob != 0) {
	arglist.freeglob = 0;
	arglist.argcnt = 0;
	globfree(&arglist.glob);
}
nextarg = NULL((void *)0);
volno = 0;
}
runshell = 1;
getcmd(curdir, cmd, sizeof cmd, name, sizeof name, &arglist);
switch (cmd[0]) {
3
←
Control jumps to 'case 108:'  at line 206→
/*
* Add elements to the extraction list.
*/
case 'a':
if (strncmp(cmd, "add", strlen(cmd)) != 0)
	goto bad;
ino = dirlookup(name);
if (ino == 0)
	break;
if (mflag)
	pathcheck(name);
treescan(name, ino, addfile);
break;
/*
* Change working directory.
*/
case 'c':
if (strncmp(cmd, "cd", strlen(cmd)) != 0)
	goto bad;
ino = dirlookup(name);
if (ino == 0)
	break;
if (inodetype(ino) == LEAF1) {
	fprintf(stderr(&__sF[2]), "%s: not a directory\n", name);
	break;
}
(void)strlcpy(curdir, name, sizeof curdir);
break;
/*
* Delete elements from the extraction list.
*/
case 'd':
if (strncmp(cmd, "delete", strlen(cmd)) != 0)
	goto bad;
np = lookupname(name);
if (np == NULL((void *)0) || (np->e_flags & NEW0x0002) == 0) {
	fprintf(stderr(&__sF[2]), "%s: not on extraction list\n", name);
	break;
}
treescan(name, np->e_ino, deletefile);
break;
/*
* Extract the requested list.
*/
case 'e':
if (strncmp(cmd, "extract", strlen(cmd)) != 0)
	goto bad;
createfiles();
createlinks();
setdirmodes(0);
if (dflag)
	checkrestore();
volno = 0;
break;
/*
* List available commands.
*/
case 'h':
if (strncmp(cmd, "help", strlen(cmd)) != 0)
	goto bad;
case '?':
fprintf(stderr(&__sF[2]), "%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s",
	"Available commands are:\n",
	"\tls [arg] - list directory\n",
	"\tcd arg - change directory\n",
	"\tpwd - print current directory\n",
	"\tadd [arg] - add `arg' to list of",
	" files to be extracted\n",
	"\tdelete [arg] - delete `arg' from",
	" list of files to be extracted\n",
	"\textract - extract requested files\n",
	"\tsetmodes - set modes of requested directories\n",
	"\tquit - immediately exit program\n",
	"\twhat - list dump header information\n",
	"\tverbose - toggle verbose flag",
	" (useful with ``ls'')\n",
	"\thelp or `?' - print this list\n",
	"If no `arg' is supplied, the current",
	" directory is used\n");
break;
/*
* List a directory.
*/
case 'l':
if (strncmp(cmd, "ls", strlen(cmd)) != 0)
4
←
Assuming the condition is false→
5
←
Taking false branch→
	goto bad;
printlist(name, curdir);
6
←
Calling 'printlist'→
break;
/*
* Print current directory.
*/
case 'p':
if (strncmp(cmd, "pwd", strlen(cmd)) != 0)
	goto bad;
if (curdir[1] == '\0')
	fprintf(stderr(&__sF[2]), "/\n");
else
	fprintf(stderr(&__sF[2]), "%s\n", &curdir[1]);
break;
/*
* Quit.
*/
case 'q':
if (strncmp(cmd, "quit", strlen(cmd)) != 0)
	goto bad;
return;
case 'x':
if (strncmp(cmd, "xit", strlen(cmd)) != 0)
	goto bad;
return;
/*
* Toggle verbose mode.
*/
case 'v':
if (strncmp(cmd, "verbose", strlen(cmd)) != 0)
	goto bad;
if (vflag) {
	fprintf(stderr(&__sF[2]), "verbose mode off\n");
	vflag = 0;
	break;
}
fprintf(stderr(&__sF[2]), "verbose mode on\n");
vflag++;
break;
/*
* Just restore requested directory modes.
*/
case 's':
if (strncmp(cmd, "setmodes", strlen(cmd)) != 0)
	goto bad;
setdirmodes(FORCE0x0001);
break;
/*
* Print out dump header information.
*/
case 'w':
if (strncmp(cmd, "what", strlen(cmd)) != 0)
	goto bad;
printdumpinfo();
break;
/*
* Turn on debugging.
*/
case 'D':
if (strncmp(cmd, "Debug", strlen(cmd)) != 0)
	goto bad;
if (dflag) {
	fprintf(stderr(&__sF[2]), "debugging mode off\n");
	dflag = 0;
	break;
}
fprintf(stderr(&__sF[2]), "debugging mode on\n");
dflag++;
break;
/*
* Unknown command.
*/
default:
bad:
fprintf(stderr(&__sF[2]), "%s: unknown command; type ? for help\n", cmd);
break;
}
goto loop;
286}

288/*
* Read and parse an interactive command.
* The first word on the line is assigned to "cmd". If
* there are no arguments on the command line, then "curdir"
* is returned as the argument. If there are arguments
* on the line they are returned one at a time on each
* successive call to getcmd. Each argument is first assigned
* to "name". If it does not start with "/" the pathname in
* "curdir" is prepended to it. Finally "canon" is called to
* eliminate any embedded ".." components.
*/
299static void
300getcmd(char *curdir, char *cmd, size_t cmdlen, char *name, size_t namelen,
     struct arglist *ap)
302{
char *cp;
static char input[BUFSIZ1024];
char output[BUFSIZ1024];
306#	define rawname input	/* save space by reusing input buffer */
int globretval;

/*
* Check to see if still processing arguments.
*/
if (ap->argcnt > 0)
goto retnext;
if (nextarg != NULL((void *)0))
goto getnext;
/*
* Read a command line and trim off trailing white space.
*/
do {
(void)fprintf(stderr(&__sF[2]), "%s > ", __progname);
(void)fflush(stderr(&__sF[2]));
if (fgets(input, sizeof input, terminal) == NULL((void *)0)) {
	(void)strlcpy(cmd, "quit", cmdlen);
	return;
}
} while (input[0] == '\n' || input[0] == '\0');
for (cp = &input[strlen(input) - 1];
    cp >= input && (*cp == ' ' || *cp == '\t' || *cp == '\n'); cp--)
/* trim off trailing white space and newline */;
*++cp = '\0';
/*
* Copy the command into "cmd".
*/
cp = copynext(input, cmd);
ap->cmd = cmd;
/*
* If no argument, use curdir as the default.
*/
if (*cp == '\0') {
(void)strlcpy(name, curdir, PATH_MAX1024);
return;
}
nextarg = cp;
/*
* Find the next argument.
*/
347getnext:
cp = copynext(nextarg, rawname);
if (*cp == '\0')
nextarg = NULL((void *)0);
else
nextarg = cp;
/*
* If it is an absolute pathname, canonicalize it and return it.
*/
if (rawname[0] == '/') {
canon(rawname, name, namelen);
} else {
/*
 * For relative pathnames, prepend the current directory to
 * it then canonicalize and return it.
 */
snprintf(output, sizeof(output), "%s/%s", curdir, rawname);
canon(output, name, namelen);
}
if ((globretval = glob(name, GLOB_ALTDIRFUNC0x0040 | GLOB_NOESCAPE0x1000,
   NULL((void *)0), &ap->glob)) < 0) {
fprintf(stderr(&__sF[2]), "%s: %s: ", ap->cmd, name);
switch (globretval) {
case GLOB_NOSPACE(-1):
	fprintf(stderr(&__sF[2]), "out of memory\n");
	break;
case GLOB_NOMATCH(-3):
	fprintf(stderr(&__sF[2]), "no filename match.\n");
	break;
case GLOB_ABORTED(-2):
	fprintf(stderr(&__sF[2]), "glob() aborted.\n");
	break;
default:
	fprintf(stderr(&__sF[2]), "unknown error!\n");
	break;
}
}

if (ap->glob.gl_pathc == 0)
return;
ap->freeglob = 1;
ap->argcnt = ap->glob.gl_pathc;

390retnext:
strlcpy(name, ap->glob.gl_pathv[ap->glob.gl_pathc - ap->argcnt],
   PATH_MAX1024);
if (--ap->argcnt == 0) {
ap->freeglob = 0;
globfree(&ap->glob);
}
397#	undef rawname
398}

400/*
* Strip off the next token of the input.
*/
403static char *
404copynext(char *input, char *output)
405{
char *cp, *bp;
char quote;

for (cp = input; *cp == ' ' || *cp == '\t'; cp++)
/* skip to argument */;
bp = output;
while (*cp != ' ' && *cp != '\t' && *cp != '\0') {
/*
 * Handle back slashes.
 */
if (*cp == '\\') {
	if (*++cp == '\0') {
		fprintf(stderr(&__sF[2]),
			"command lines cannot be continued\n");
		continue;
	}
	*bp++ = *cp++;
	continue;
}
/*
 * The usual unquoted case.
 */
if (*cp != '\'' && *cp != '"') {
	*bp++ = *cp++;
	continue;
}
/*
 * Handle single and double quotes.
 */
quote = *cp++;
while (*cp != quote && *cp != '\0')
	*bp++ = *cp++;
if (*cp++ == '\0') {
	fprintf(stderr(&__sF[2]), "missing %c\n", quote);
	cp--;
	continue;
}
}
*bp = '\0';
return (cp);
446}

448/*
* Canonicalize file names to always start with ``./'' and
* remove any imbedded "." and ".." components.
*/
452void
453canon(char *rawname, char *canonname, size_t canonnamelen)
454{
char *cp, *np;

if (strcmp(rawname, ".") == 0 || strncmp(rawname, "./", 2) == 0)
(void)strlcpy(canonname, "", canonnamelen);
else if (rawname[0] == '/')
(void)strlcpy(canonname, ".", canonnamelen);
else
(void)strlcpy(canonname, "./", canonnamelen);
(void)strlcat(canonname, rawname, canonnamelen);
/*
* Eliminate multiple and trailing '/'s
*/
for (cp = np = canonname; *np != '\0'; cp++) {
*cp = *np++;
while (*cp == '/' && *np == '/')
	np++;
}
*cp = '\0';
if (*--cp == '/')
*cp = '\0';
/*
* Eliminate extraneous "." and ".." from pathnames.
*/
for (np = canonname; *np != '\0'; ) {
np++;
cp = np;
while (*np != '/' && *np != '\0')
	np++;
if (np - cp == 1 && *cp == '.') {
	cp--;
	(void)strlcpy(cp, np, canonname + canonnamelen - cp);
	np = cp;
}
if (np - cp == 2 && strncmp(cp, "..", 2) == 0) {
	cp--;
	while (cp > &canonname[1] && *--cp != '/')
		/* find beginning of name */;
	(void)strlcpy(cp, np, canonname + canonnamelen - cp);
	np = cp;
}
}
496}

498/*
* Do an "ls" style listing of a directory
*/
501static void
502printlist(char *name, char *basename)
503{
struct afile *fp, *list, *listp = NULL((void *)0);
struct direct *dp;
struct afile single;
RST_DIR *dirp;
size_t namelen;
int entries, len;
char locname[PATH_MAX1024];

dp = pathsearch(name);
if (dp == NULL((void *)0) || (!dflag && TSTINO(dp->d_ino, dumpmap)(dumpmap[(u_int)((dp->d_ino) - 1) / 8] & (1 << (
(u_int)((dp->d_ino) - 1) % 8))) == 0))
7
←
Assuming 'dp' is not equal to NULL→
8
←
Assuming 'dflag' is not equal to 0→
return;
if ((dirp = rst_opendir(name)) == NULL((void *)0)) {
9
←
Assuming the condition is true→
10
←
Taking true branch→
entries = 1;
list = &single;
mkentry(name, dp, list);
11
←
Calling 'mkentry'→
17
←
Returning from 'mkentry'→
len = strlen(basename) + 1;
if (strlen(name) - len > single.len) {
18
←
Assuming the condition is true→
19
←
Taking true branch→
	freename(single.fname);
	single.fname = savename(&name[len]);
	single.len = strlen(single.fname);
}
} else {
entries = 0;
while ((dp = rst_readdir(dirp)))
	entries++;
rst_closedir(dirp);
list = calloc(entries, sizeof(struct afile));
if (list == NULL((void *)0)) {
	fprintf(stderr(&__sF[2]), "ls: out of memory\n");
	return;
}
if ((dirp = rst_opendir(name)) == NULL((void *)0))
	panic("directory reopen failed\n");
fprintf(stderr(&__sF[2]), "%s:\n", name);
entries = 0;
listp = list;
namelen = strlcpy(locname, name, sizeof(locname));
if (namelen >= sizeof(locname) - 1)
	namelen = sizeof(locname) - 2;
locname[namelen++] = '/';
locname[namelen] = '\0';
while ((dp = rst_readdir(dirp))) {
	if (dp == NULL((void *)0))
		break;
	if (!dflag && TSTINO(dp->d_ino, dumpmap)(dumpmap[(u_int)((dp->d_ino) - 1) / 8] & (1 << (
(u_int)((dp->d_ino) - 1) % 8))) == 0)
		continue;
	if (!vflag && (strcmp(dp->d_name, ".") == 0 ||
	     strcmp(dp->d_name, "..") == 0))
		continue;
	locname[namelen] = '\0';
	if (namelen + dp->d_namlen >= PATH_MAX1024) {
		fprintf(stderr(&__sF[2]), "%s%s: name exceeds %d char\n",
			locname, dp->d_name, PATH_MAX1024);
	} else {
		(void)strncat(locname, dp->d_name,
		    (int)dp->d_namlen);
		mkentry(locname, dp, listp++);
		entries++;
	}
}
rst_closedir(dirp);
if (entries == 0) {
	fprintf(stderr(&__sF[2]), "\n");
	free(list);
	return;
}
qsort((char *)list, entries, sizeof(struct afile), fcmp);
}
formatf(list, entries);
20
←
Calling 'formatf'→
if (dirp != NULL((void *)0)) {
for (fp = listp - 1; fp >= list; fp--)
	freename(fp->fname);
fprintf(stderr(&__sF[2]), "\n");
free(list);
}
579}

581/*
* Read the contents of a directory.
*/
584static void
585mkentry(char *name, struct direct *dp, struct afile *fp)
586{
char *cp;
struct entry *np;

fp->fnum = dp->d_ino;
fp->fname = savename(dp->d_name);
for (cp = fp->fname; *cp; cp++)
12
←
Loop condition is false. Execution continues on line 595→
if (!vflag && (*cp < ' ' || *cp >= 0177))
	*cp = '?';
fp->len = cp - fp->fname;
if (dflag && TSTINO(fp->fnum, dumpmap)(dumpmap[(u_int)((fp->fnum) - 1) / 8] & (1 << ((
u_int)((fp->fnum) - 1) % 8))) == 0)
13
←
Assuming 'dflag' is 0→
fp->prefix = '^';
else if ((np = lookupname(name)) != NULL((void *)0) && (np->e_flags & NEW0x0002))
14
←
Assuming the condition is false→
fp->prefix = '*';
else
fp->prefix = ' ';
switch(dp->d_type) {
15
←
Control jumps to 'case 8:'  at line 608→

default:
fprintf(stderr(&__sF[2]), "Warning: undefined file type %d\n",
    dp->d_type);
/* fall through */
case DT_REG8:
fp->postfix = ' ';
break;
16
←
 Execution continues on line 634→

case DT_LNK10:
fp->postfix = '@';
break;

case DT_FIFO1:
case DT_SOCK12:
fp->postfix = '=';
break;

case DT_CHR2:
case DT_BLK6:
fp->postfix = '#';
break;

case DT_UNKNOWN0:
case DT_DIR4:
if (inodetype(dp->d_ino) == NODE2)
	fp->postfix = '/';
else
	fp->postfix = ' ';
break;
}
return;
635}

637/*
* Print out a pretty listing of a directory
*/
640static void
641formatf(struct afile *list, int nentry)
642{
struct afile *fp, *endlist;
int width, bigino, haveprefix, havepostfix;
int i, j, w, precision = 0, columns, lines;

width = 0;
haveprefix = 0;
havepostfix = 0;
bigino = ROOTINO((ufsino_t)2);
endlist = &list[nentry];
for (fp = &list[0]; fp < endlist; fp++) {
21
←
Loop condition is true.  Entering loop body→
28
←
Loop condition is false. Execution continues on line 662→
if (bigino < fp->fnum)
22
←
Assuming 'bigino' is >= field 'fnum'→
23
←
Taking false branch→
	bigino = fp->fnum;
if (width < fp->len)
24
←
Assuming 'width' is < field 'len'→
25
←
Taking true branch→
	width = fp->len;
if (fp->prefix != ' ')
26
←
Taking false branch→
	haveprefix = 1;
if (fp->postfix != ' ')
27
←
Taking false branch→
	havepostfix = 1;
}
if (haveprefix28.1
'haveprefix' is 0
)
29
←
Taking false branch→
width++;
if (havepostfix29.1
'havepostfix' is 0
)
30
←
Taking false branch→
width++;
if (vflag) {
31
←
Assuming 'vflag' is not equal to 0→
32
←
Taking true branch→
for (precision = 0, i = bigino; i > 0; i /= 10)
33
←
Loop condition is true.  Entering loop body→
34
←
Loop condition is false. Execution continues on line 669→
	precision++;
width += precision + 1;
}
width++;
columns = 81 / width;
if (columns == 0)
35
←
Assuming 'columns' is not equal to 0→
36
←
Taking false branch→
columns = 1;
lines = (nentry + columns - 1) / columns;
for (i = 0; i < lines; i++) {
37
←
Assuming 'i' is < 'lines'→
38
←
Loop condition is true.  Entering loop body→
46
←
Assuming 'i' is < 'lines'→
47
←
Loop condition is true.  Entering loop body→
for (j = 0; j47.1
'j' is < 'columns'
 < columns; j++) {
39
←
Assuming 'j' is < 'columns'→
40
←
Loop condition is true.  Entering loop body→
48
←
Loop condition is true.  Entering loop body→
	fp = &list[j * lines + i];
	if (vflag40.1
'vflag' is not equal to 0
1
'vflag' is not equal to 0
) {
41
←
Taking true branch→
49
←
Taking true branch→
		fprintf(stderr(&__sF[2]), "%*llu ", precision,
50
←
4th function call argument is an uninitialized value
		(unsigned long long)fp->fnum);
		fp->len += precision + 1;
	}
	if (haveprefix41.1
'haveprefix' is 0
) {
42
←
Taking false branch→
		putc(fp->prefix, stderr)(!__isthreaded ? __sputc(fp->prefix, (&__sF[2])) : (putc
)(fp->prefix, (&__sF[2])));
		fp->len++;
	}
	fprintf(stderr(&__sF[2]), "%s", fp->fname);
	if (havepostfix42.1
'havepostfix' is 0
) {
43
←
Taking false branch→
		putc(fp->postfix, stderr)(!__isthreaded ? __sputc(fp->postfix, (&__sF[2])) : (putc
)(fp->postfix, (&__sF[2])));
		fp->len++;
	}
	if (fp + lines >= endlist) {
44
←
Taking true branch→
		fprintf(stderr(&__sF[2]), "\n");
		break;
45
←
 Execution continues on line 676→
	}
	for (w = fp->len; w < width; w++)
		putc(' ', stderr)(!__isthreaded ? __sputc(' ', (&__sF[2])) : (putc)(' ', (
&__sF[2])));
}
}
701}

703/*
* Skip over directory entries that are not on the tape
*
* First have to get definition of a dirent.
*/
708#undef DIRBLKSIZ1024
709#include <dirent.h>
710#undef d_ino

712struct dirent *
713glob_readdir(RST_DIR *dirp)
714{
struct direct *dp;
static struct dirent adirent;

while ((dp = rst_readdir(dirp)) != NULL((void *)0)) {
if (dflag || TSTINO(dp->d_ino, dumpmap)(dumpmap[(u_int)((dp->d_ino) - 1) / 8] & (1 << (
(u_int)((dp->d_ino) - 1) % 8))))
	break;
}
if (dp == NULL((void *)0))
return (NULL((void *)0));
adirent.d_fileno = dp->d_ino;
adirent.d_namlen = dp->d_namlen;
memcpy(adirent.d_name, dp->d_name, dp->d_namlen + 1);
return (&adirent);
728}

730/*
* Return st_mode information in response to stat or lstat calls
*/
733static int
734glob_stat(const char *name, struct stat *stp)
735{
struct direct *dp;

dp = pathsearch(name);
if (dp == NULL((void *)0) || (!dflag && TSTINO(dp->d_ino, dumpmap)(dumpmap[(u_int)((dp->d_ino) - 1) / 8] & (1 << (
(u_int)((dp->d_ino) - 1) % 8))) == 0))
return (-1);
if (inodetype(dp->d_ino) == NODE2)
stp->st_mode = S_IFDIR0040000;
else
stp->st_mode = S_IFREG0100000;
return (0);
746}

748/*
* Comparison routine for qsort.
*/
751static int
752fcmp(const void *f1, const void *f2)
753{
return (strcmp(((struct afile *)f1)->fname,
   ((struct afile *)f2)->fname));
756}

758/*
* respond to interrupts
*/
761void
762onintr(int signo)
763{
int save_errno = errno(*__errno());

if (command == 'i' && runshell)
longjmp(reset, 1);	/* XXX signal/longjmp reentrancy */
if (reply("restore interrupted, continue") == FAIL0)	/* XXX signal race */
_exit(1);
errno(*__errno()) = save_errno;
771}