/usr/src/usr.bin/ssh/sftp/../sftp.c

Bug Summary

File:	src/usr.bin/ssh/sftp/../sftp.c
Warning:	line 1408, column 13 Null pointer passed as 1st argument to string length function
Annotated Source Code

Press '?' to see keyboard shortcuts
Show analyzer invocation
clang -cc1 -cc1 -triple amd64-unknown-openbsd7.0 -analyze -disable-free -disable-llvm-verifier -discard-value-names -main-file-name sftp.c -analyzer-store=region -analyzer-opt-analyze-nested-blocks -analyzer-checker=core -analyzer-checker=apiModeling -analyzer-checker=unix -analyzer-checker=deadcode -analyzer-checker=security.insecureAPI.UncheckedReturn -analyzer-checker=security.insecureAPI.getpw -analyzer-checker=security.insecureAPI.gets -analyzer-checker=security.insecureAPI.mktemp -analyzer-checker=security.insecureAPI.mkstemp -analyzer-checker=security.insecureAPI.vfork -analyzer-checker=nullability.NullPassedToNonnull -analyzer-checker=nullability.NullReturnedFromNonnull -analyzer-output plist -w -setup-static-analyzer -mrelocation-model pic -pic-level 1 -pic-is-pie -mframe-pointer=all -relaxed-aliasing -fno-rounding-math -mconstructor-aliases -munwind-tables -target-cpu x86-64 -target-feature +retpoline-indirect-calls -target-feature +retpoline-indirect-branches -tune-cpu generic -debugger-tuning=gdb -fcoverage-compilation-dir=/usr/src/usr.bin/ssh/sftp/obj -resource-dir /usr/local/lib/clang/13.0.0 -I /usr/src/usr.bin/ssh/sftp/.. -D WITH_OPENSSL -D WITH_ZLIB -D ENABLE_PKCS11 -D HAVE_DLOPEN -internal-isystem /usr/local/lib/clang/13.0.0/include -internal-externc-isystem /usr/include -O2 -Wno-unused-parameter -fdebug-compilation-dir=/usr/src/usr.bin/ssh/sftp/obj -ferror-limit 19 -fwrapv -D_RET_PROTECTOR -ret-protector -fgnuc-version=4.2.1 -vectorize-loops -vectorize-slp -fno-builtin-malloc -fno-builtin-calloc -fno-builtin-realloc -fno-builtin-valloc -fno-builtin-free -fno-builtin-strdup -fno-builtin-strndup -analyzer-output=html -faddrsig -D__GCC_HAVE_DWARF2_CFI_ASM=1 -o /home/ben/Projects/vmm/scan-build/2022-01-12-194120-40624-1 -x c /usr/src/usr.bin/ssh/sftp/../sftp.c
1/* $OpenBSD: sftp.c,v 1.212 2021/09/11 09:05:50 schwarze Exp $ */
2/*
* Copyright (c) 2001-2004 Damien Miller <djm@openbsd.org>
*
* Permission to use, copy, modify, and distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
* copyright notice and this permission notice appear in all copies.
*
* THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
* WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
* MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
* ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
* WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
* ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
* OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
*/

18#include <sys/types.h>
19#include <sys/ioctl.h>
20#include <sys/wait.h>
21#include <sys/stat.h>
22#include <sys/socket.h>
23#include <sys/statvfs.h>

25#include <ctype.h>
26#include <errno(*__errno()).h>
27#include <glob.h>
28#include <histedit.h>
29#include <paths.h>
30#include <libgen.h>
31#include <locale.h>
32#include <signal.h>
33#include <stdarg.h>
34#include <stdlib.h>
35#include <stdio.h>
36#include <string.h>
37#include <unistd.h>
38#include <limits.h>
39#include <util.h>

41#include "xmalloc.h"
42#include "log.h"
43#include "pathnames.h"
44#include "misc.h"
45#include "utf8.h"

47#include "sftp.h"
48#include "ssherr.h"
49#include "sshbuf.h"
50#include "sftp-common.h"
51#include "sftp-client.h"

53/* File to read commands from */
54FILE* infile;

56/* Are we in batchfile mode? */
57int batchmode = 0;

59/* PID of ssh transport process */
60static volatile pid_t sshpid = -1;

62/* Suppress diagnostic messages */
63int quiet = 0;

65/* This is set to 0 if the progressmeter is not desired. */
66int showprogress = 1;

68/* When this option is set, we always recursively download/upload directories */
69int global_rflag = 0;

71/* When this option is set, we resume download or upload if possible */
72int global_aflag = 0;

74/* When this option is set, the file transfers will always preserve times */
75int global_pflag = 0;

77/* When this option is set, transfers will have fsync() called on each file */
78int global_fflag = 0;

80/* SIGINT received during command processing */
81volatile sig_atomic_t interrupted = 0;

83/* I wish qsort() took a separate ctx for the comparison function...*/
84int sort_flag;
85glob_t *sort_glob;

87/* Context used for commandline completion */
88struct complete_ctx {
struct sftp_conn *conn;
char **remote_pathp;
91};

93int remote_glob(struct sftp_conn *, const char *, int,
  int (*)(const char *, int), glob_t *); /* proto for sftp-glob.c */

96/* Separators for interactive commands */
97#define WHITESPACE" \t\r\n" " \t\r\n"

99/* ls flags */
100#define LS_LONG_VIEW0x0001	0x0001	/* Full view ala ls -l */
101#define LS_SHORT_VIEW0x0002	0x0002	/* Single row view ala ls -1 */
102#define LS_NUMERIC_VIEW0x0004	0x0004	/* Long view with numeric uid/gid */
103#define LS_NAME_SORT0x0008	0x0008	/* Sort by name (default) */
104#define LS_TIME_SORT0x0010	0x0010	/* Sort by mtime */
105#define LS_SIZE_SORT0x0020	0x0020	/* Sort by file size */
106#define LS_REVERSE_SORT0x0040	0x0040	/* Reverse sort order */
107#define LS_SHOW_ALL0x0080	0x0080	/* Don't skip filenames starting with '.' */
108#define LS_SI_UNITS0x0100	0x0100	/* Display sizes as K, M, G, etc. */

110#define VIEW_FLAGS(0x0001|0x0002|0x0004|0x0100)	(LS_LONG_VIEW0x0001|LS_SHORT_VIEW0x0002|LS_NUMERIC_VIEW0x0004|LS_SI_UNITS0x0100)
111#define SORT_FLAGS(0x0008|0x0010|0x0020)	(LS_NAME_SORT0x0008|LS_TIME_SORT0x0010|LS_SIZE_SORT0x0020)

113/* Commands for interactive mode */
114enum sftp_command {
I_CHDIR = 1,
I_CHGRP,
I_CHMOD,
I_CHOWN,
I_DF,
I_GET,
I_HELP,
I_LCHDIR,
I_LINK,
I_LLS,
I_LMKDIR,
I_LPWD,
I_LS,
I_LUMASK,
I_MKDIR,
I_PUT,
I_PWD,
I_QUIT,
I_REGET,
I_RENAME,
I_REPUT,
I_RM,
I_RMDIR,
I_SHELL,
I_SYMLINK,
I_VERSION,
I_PROGRESS,
142};

144struct CMD {
const char *c;
const int n;
const int t;
148};

150/* Type of completion */
151#define NOARGS0	0
152#define REMOTE1	1
153#define LOCAL2	2

155static const struct CMD cmds[] = {
{ "bye",	I_QUIT,		NOARGS0	},
{ "cd",		I_CHDIR,	REMOTE1	},
{ "chdir",	I_CHDIR,	REMOTE1	},
{ "chgrp",	I_CHGRP,	REMOTE1	},
{ "chmod",	I_CHMOD,	REMOTE1	},
{ "chown",	I_CHOWN,	REMOTE1	},
{ "df",		I_DF,		REMOTE1	},
{ "dir",	I_LS,		REMOTE1	},
{ "exit",	I_QUIT,		NOARGS0	},
{ "get",	I_GET,		REMOTE1	},
{ "help",	I_HELP,		NOARGS0	},
{ "lcd",	I_LCHDIR,	LOCAL2	},
{ "lchdir",	I_LCHDIR,	LOCAL2	},
{ "lls",	I_LLS,		LOCAL2	},
{ "lmkdir",	I_LMKDIR,	LOCAL2	},
{ "ln",		I_LINK,		REMOTE1	},
{ "lpwd",	I_LPWD,		LOCAL2	},
{ "ls",		I_LS,		REMOTE1	},
{ "lumask",	I_LUMASK,	NOARGS0	},
{ "mkdir",	I_MKDIR,	REMOTE1	},
{ "mget",	I_GET,		REMOTE1	},
{ "mput",	I_PUT,		LOCAL2	},
{ "progress",	I_PROGRESS,	NOARGS0	},
{ "put",	I_PUT,		LOCAL2	},
{ "pwd",	I_PWD,		REMOTE1	},
{ "quit",	I_QUIT,		NOARGS0	},
{ "reget",	I_REGET,	REMOTE1	},
{ "rename",	I_RENAME,	REMOTE1	},
{ "reput",	I_REPUT,	LOCAL2	},
{ "rm",		I_RM,		REMOTE1	},
{ "rmdir",	I_RMDIR,	REMOTE1	},
{ "symlink",	I_SYMLINK,	REMOTE1	},
{ "version",	I_VERSION,	NOARGS0	},
{ "!",		I_SHELL,	NOARGS0	},
{ "?",		I_HELP,		NOARGS0	},
{ NULL((void *)0),		-1,		-1	}
192};

194/* ARGSUSED */
195static void
196killchild(int signo)
197{
pid_t pid;

pid = sshpid;
if (pid > 1) {
kill(pid, SIGTERM15);
waitpid(pid, NULL((void *)0), 0);
}

_exit(1);
207}

209/* ARGSUSED */
210static void
211suspchild(int signo)
212{
if (sshpid > 1) {
kill(sshpid, signo);
while (waitpid(sshpid, NULL((void *)0), WUNTRACED2) == -1 && errno(*__errno()) == EINTR4)
	continue;
}
kill(getpid(), SIGSTOP17);
219}

221/* ARGSUSED */
222static void
223cmd_interrupt(int signo)
224{
const char msg[] = "\rInterrupt  \n";
int olderrno = errno(*__errno());

(void)write(STDERR_FILENO2, msg, sizeof(msg) - 1);
interrupted = 1;
errno(*__errno()) = olderrno;
231}

233/* ARGSUSED */
234static void
235read_interrupt(int signo)
236{
interrupted = 1;
238}

240/*ARGSUSED*/
241static void
242sigchld_handler(int sig)
243{
int save_errno = errno(*__errno());
pid_t pid;
const char msg[] = "\rConnection closed.  \n";

/* Report if ssh transport process dies. */
while ((pid = waitpid(sshpid, NULL((void *)0), WNOHANG1)) == -1 && errno(*__errno()) == EINTR4)
continue;
if (pid == sshpid) {
(void)write(STDERR_FILENO2, msg, sizeof(msg) - 1);
sshpid = -1;
}

errno(*__errno()) = save_errno;
257}

259static void
260help(void)
261{
printf("Available commands:\n"
   "bye                                Quit sftp\n"
   "cd path                            Change remote directory to 'path'\n"
   "chgrp [-h] grp path                Change group of file 'path' to 'grp'\n"
   "chmod [-h] mode path               Change permissions of file 'path' to 'mode'\n"
   "chown [-h] own path                Change owner of file 'path' to 'own'\n"
   "df [-hi] [path]                    Display statistics for current directory or\n"
   "                                   filesystem containing 'path'\n"
   "exit                               Quit sftp\n"
   "get [-afpR] remote [local]         Download file\n"
   "help                               Display this help text\n"
   "lcd path                           Change local directory to 'path'\n"
   "lls [ls-options [path]]            Display local directory listing\n"
   "lmkdir path                        Create local directory\n"
   "ln [-s] oldpath newpath            Link remote file (-s for symlink)\n"
   "lpwd                               Print local working directory\n"
   "ls [-1afhlnrSt] [path]             Display remote directory listing\n"
   "lumask umask                       Set local umask to 'umask'\n"
   "mkdir path                         Create remote directory\n"
   "progress                           Toggle display of progress meter\n"
   "put [-afpR] local [remote]         Upload file\n"
   "pwd                                Display remote working directory\n"
   "quit                               Quit sftp\n"
   "reget [-fpR] remote [local]        Resume download file\n"
   "rename oldpath newpath             Rename remote file\n"
   "reput [-fpR] local [remote]        Resume upload file\n"
   "rm path                            Delete remote file\n"
   "rmdir path                         Remove remote directory\n"
   "symlink oldpath newpath            Symlink remote file\n"
   "version                            Show SFTP version\n"
   "!command                           Execute 'command' in local shell\n"
   "!                                  Escape to local shell\n"
   "?                                  Synonym for help\n");
295}

297static void
298local_do_shell(const char *args)
299{
int status;
char *shell;
pid_t pid;

if (!*args)
args = NULL((void *)0);

if ((shell = getenv("SHELL")) == NULL((void *)0) || *shell == '\0')
shell = _PATH_BSHELL"/bin/sh";

if ((pid = fork()) == -1)
fatal("Couldn't fork: %s", strerror(errno))sshfatal("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 311
, 0, SYSLOG_LEVEL_FATAL, ((void *)0), "Couldn't fork: %s", strerror
((*__errno())));

if (pid == 0) {
/* XXX: child has pipe fds to ssh subproc open - issue? */
if (args) {
	debug3("Executing %s -c \"%s\"", shell, args)sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 316, 0
, SYSLOG_LEVEL_DEBUG3, ((void *)0), "Executing %s -c \"%s\"",
 shell, args);
	execl(shell, shell, "-c", args, (char *)NULL((void *)0));
} else {
	debug3("Executing %s", shell)sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 319, 0
, SYSLOG_LEVEL_DEBUG3, ((void *)0), "Executing %s", shell);
	execl(shell, shell, (char *)NULL((void *)0));
}
fprintf(stderr(&__sF[2]), "Couldn't execute \"%s\": %s\n", shell,
    strerror(errno(*__errno())));
_exit(1);
}
while (waitpid(pid, &status, 0) == -1)
if (errno(*__errno()) != EINTR4)
	fatal("Couldn't wait for child: %s", strerror(errno))sshfatal("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 328
, 0, SYSLOG_LEVEL_FATAL, ((void *)0), "Couldn't wait for child: %s"
, strerror((*__errno())));
if (!WIFEXITED(status)(((status) & 0177) == 0))
error("Shell exited abnormally")sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 330, 0
, SYSLOG_LEVEL_ERROR, ((void *)0), "Shell exited abnormally");
else if (WEXITSTATUS(status)(int)(((unsigned)(status) >> 8) & 0xff))
error("Shell exited with status %d", WEXITSTATUS(status))sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 332, 0
, SYSLOG_LEVEL_ERROR, ((void *)0), "Shell exited with status %d"
, (int)(((unsigned)(status) >> 8) & 0xff));
333}

335static void
336local_do_ls(const char *args)
337{
if (!args || !*args)
local_do_shell(_PATH_LS"ls");
else {
int len = strlen(_PATH_LS"ls" " ") + strlen(args) + 1;
char *buf = xmalloc(len);

/* XXX: quoting - rip quoting code from ftp? */
snprintf(buf, len, _PATH_LS"ls" " %s", args);
local_do_shell(buf);
free(buf);
}
349}

351/* Strip one path (usually the pwd) from the start of another */
352static char *
353path_strip(const char *path, const char *strip)
354{
size_t len;

if (strip == NULL((void *)0))
return (xstrdup(path));

len = strlen(strip);
if (strncmp(path, strip, len) == 0) {
if (strip[len - 1] != '/' && path[len] == '/')
	len++;
return (xstrdup(path + len));
}

return (xstrdup(path));
368}

370static int
371parse_getput_flags(const char *cmd, char **argv, int argc,
  int *aflag, int *fflag, int *pflag, int *rflag)
373{
extern int opterr, optind, optopt, optreset;
int ch;

optind = optreset = 1;
opterr = 0;

*aflag = *fflag = *rflag = *pflag = 0;
while ((ch = getopt(argc, argv, "afPpRr")) != -1) {
switch (ch) {
case 'a':
	*aflag = 1;
	break;
case 'f':
	*fflag = 1;
	break;
case 'p':
case 'P':
	*pflag = 1;
	break;
case 'r':
case 'R':
	*rflag = 1;
	break;
default:
	error("%s: Invalid flag -%c", cmd, optopt)sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 398, 0
, SYSLOG_LEVEL_ERROR, ((void *)0), "%s: Invalid flag -%c", cmd
, optopt);
	return -1;
}
}

return optind;
404}

406static int
407parse_link_flags(const char *cmd, char **argv, int argc, int *sflag)
408{
extern int opterr, optind, optopt, optreset;
int ch;

optind = optreset = 1;
opterr = 0;

*sflag = 0;
while ((ch = getopt(argc, argv, "s")) != -1) {
switch (ch) {
case 's':
	*sflag = 1;
	break;
default:
	error("%s: Invalid flag -%c", cmd, optopt)sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 422, 0
, SYSLOG_LEVEL_ERROR, ((void *)0), "%s: Invalid flag -%c", cmd
, optopt);
	return -1;
}
}

return optind;
428}

430static int
431parse_rename_flags(const char *cmd, char **argv, int argc, int *lflag)
432{
extern int opterr, optind, optopt, optreset;
int ch;

optind = optreset = 1;
opterr = 0;

*lflag = 0;
while ((ch = getopt(argc, argv, "l")) != -1) {
switch (ch) {
case 'l':
	*lflag = 1;
	break;
default:
	error("%s: Invalid flag -%c", cmd, optopt)sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 446, 0
, SYSLOG_LEVEL_ERROR, ((void *)0), "%s: Invalid flag -%c", cmd
, optopt);
	return -1;
}
}

return optind;
452}

454static int
455parse_ls_flags(char **argv, int argc, int *lflag)
456{
extern int opterr, optind, optopt, optreset;
int ch;

optind = optreset = 1;
opterr = 0;

*lflag = LS_NAME_SORT0x0008;
while ((ch = getopt(argc, argv, "1Safhlnrt")) != -1) {
switch (ch) {
case '1':
	*lflag &= ~VIEW_FLAGS(0x0001|0x0002|0x0004|0x0100);
	*lflag |= LS_SHORT_VIEW0x0002;
	break;
case 'S':
	*lflag &= ~SORT_FLAGS(0x0008|0x0010|0x0020);
	*lflag |= LS_SIZE_SORT0x0020;
	break;
case 'a':
	*lflag |= LS_SHOW_ALL0x0080;
	break;
case 'f':
	*lflag &= ~SORT_FLAGS(0x0008|0x0010|0x0020);
	break;
case 'h':
	*lflag |= LS_SI_UNITS0x0100;
	break;
case 'l':
	*lflag &= ~LS_SHORT_VIEW0x0002;
	*lflag |= LS_LONG_VIEW0x0001;
	break;
case 'n':
	*lflag &= ~LS_SHORT_VIEW0x0002;
	*lflag |= LS_NUMERIC_VIEW0x0004|LS_LONG_VIEW0x0001;
	break;
case 'r':
	*lflag |= LS_REVERSE_SORT0x0040;
	break;
case 't':
	*lflag &= ~SORT_FLAGS(0x0008|0x0010|0x0020);
	*lflag |= LS_TIME_SORT0x0010;
	break;
default:
	error("ls: Invalid flag -%c", optopt)sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 499, 0
, SYSLOG_LEVEL_ERROR, ((void *)0), "ls: Invalid flag -%c", optopt
);
	return -1;
}
}

return optind;
505}

507static int
508parse_df_flags(const char *cmd, char **argv, int argc, int *hflag, int *iflag)
509{
extern int opterr, optind, optopt, optreset;
int ch;

optind = optreset = 1;
opterr = 0;

*hflag = *iflag = 0;
while ((ch = getopt(argc, argv, "hi")) != -1) {
switch (ch) {
case 'h':
	*hflag = 1;
	break;
case 'i':
	*iflag = 1;
	break;
default:
	error("%s: Invalid flag -%c", cmd, optopt)sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 526, 0
, SYSLOG_LEVEL_ERROR, ((void *)0), "%s: Invalid flag -%c", cmd
, optopt);
	return -1;
}
}

return optind;
532}

534static int
535parse_ch_flags(const char *cmd, char **argv, int argc, int *hflag)
536{
extern int opterr, optind, optopt, optreset;
int ch;

optind = optreset = 1;
opterr = 0;

*hflag = 0;
while ((ch = getopt(argc, argv, "h")) != -1) {
switch (ch) {
case 'h':
	*hflag = 1;
	break;
default:
	error("%s: Invalid flag -%c", cmd, optopt)sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 550, 0
, SYSLOG_LEVEL_ERROR, ((void *)0), "%s: Invalid flag -%c", cmd
, optopt);
	return -1;
}
}

return optind;
556}

558static int
559parse_no_flags(const char *cmd, char **argv, int argc)
560{
extern int opterr, optind, optopt, optreset;
int ch;

optind = optreset = 1;
opterr = 0;

while ((ch = getopt(argc, argv, "")) != -1) {
switch (ch) {
default:
	error("%s: Invalid flag -%c", cmd, optopt)sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 570, 0
, SYSLOG_LEVEL_ERROR, ((void *)0), "%s: Invalid flag -%c", cmd
, optopt);
	return -1;
}
}

return optind;
576}

578static int
579process_get(struct sftp_conn *conn, const char *src, const char *dst,
  const char *pwd, int pflag, int rflag, int resume, int fflag)
581{
char *abs_src = NULL((void *)0);
char *abs_dst = NULL((void *)0);
glob_t g;
char *filename, *tmp=NULL((void *)0);
int i, r, err = 0;

abs_src = xstrdup(src);
abs_src = make_absolute(abs_src, pwd);
memset(&g, 0, sizeof(g));

debug3("Looking up %s", abs_src)sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 592, 0
, SYSLOG_LEVEL_DEBUG3, ((void *)0), "Looking up %s", abs_src);
if ((r = remote_glob(conn, abs_src, GLOB_MARK0x0008, NULL((void *)0), &g)) != 0) {
if (r == GLOB_NOSPACE(-1)) {
	error("Too many matches for \"%s\".", abs_src)sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 595, 0
, SYSLOG_LEVEL_ERROR, ((void *)0), "Too many matches for \"%s\"."
, abs_src);
} else {
	error("File \"%s\" not found.", abs_src)sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 597, 0
, SYSLOG_LEVEL_ERROR, ((void *)0), "File \"%s\" not found.", abs_src
);
}
err = -1;
goto out;
}

/*
* If multiple matches then dst must be a directory or
* unspecified.
*/
if (g.gl_matchc > 1 && dst != NULL((void *)0) && !local_is_dir(dst)) {
error("Multiple source paths, but destination "sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 609, 0
, SYSLOG_LEVEL_ERROR, ((void *)0), "Multiple source paths, but destination "
 "\"%s\" is not a directory", dst)
    "\"%s\" is not a directory", dst)sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 609, 0
, SYSLOG_LEVEL_ERROR, ((void *)0), "Multiple source paths, but destination "
 "\"%s\" is not a directory", dst);
err = -1;
goto out;
}

for (i = 0; g.gl_pathv[i] && !interrupted; i++) {
tmp = xstrdup(g.gl_pathv[i]);
if ((filename = basename(tmp)) == NULL((void *)0)) {
	error("basename %s: %s", tmp, strerror(errno))sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 617, 0
, SYSLOG_LEVEL_ERROR, ((void *)0), "basename %s: %s", tmp, strerror
((*__errno())));
	free(tmp);
	err = -1;
	goto out;
}

if (g.gl_matchc == 1 && dst) {
	if (local_is_dir(dst)) {
		abs_dst = path_append(dst, filename);
	} else {
		abs_dst = xstrdup(dst);
	}
} else if (dst) {
	abs_dst = path_append(dst, filename);
} else {
	abs_dst = xstrdup(filename);
}
free(tmp);

resume |= global_aflag;
if (!quiet && resume)
	mprintf("Resuming %s to %s\n",
	    g.gl_pathv[i], abs_dst);
else if (!quiet && !resume)
	mprintf("Fetching %s to %s\n",
	    g.gl_pathv[i], abs_dst);
/* XXX follow link flag */
if (globpath_is_dir(g.gl_pathv[i]) && (rflag || global_rflag)) {
	if (download_dir(conn, g.gl_pathv[i], abs_dst, NULL((void *)0),
	    pflag || global_pflag, 1, resume,
	    fflag || global_fflag, 0) == -1)
		err = -1;
} else {
	if (do_download(conn, g.gl_pathv[i], abs_dst, NULL((void *)0),
	    pflag || global_pflag, resume,
	    fflag || global_fflag) == -1)
		err = -1;
}
free(abs_dst);
abs_dst = NULL((void *)0);
}

659out:
free(abs_src);
globfree(&g);
return(err);
663}

665static int
666process_put(struct sftp_conn *conn, const char *src, const char *dst,
  const char *pwd, int pflag, int rflag, int resume, int fflag)
668{
char *tmp_dst = NULL((void *)0);
char *abs_dst = NULL((void *)0);
char *tmp = NULL((void *)0), *filename = NULL((void *)0);
glob_t g;
int err = 0;
int i, dst_is_dir = 1;
struct stat sb;

if (dst) {
tmp_dst = xstrdup(dst);
tmp_dst = make_absolute(tmp_dst, pwd);
}

memset(&g, 0, sizeof(g));
debug3("Looking up %s", src)sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 683, 0
, SYSLOG_LEVEL_DEBUG3, ((void *)0), "Looking up %s", src);
if (glob(src, GLOB_NOCHECK0x0010 | GLOB_MARK0x0008, NULL((void *)0), &g)) {
error("File \"%s\" not found.", src)sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 685, 0
, SYSLOG_LEVEL_ERROR, ((void *)0), "File \"%s\" not found.", src
);
err = -1;
goto out;
}

/* If we aren't fetching to pwd then stash this status for later */
if (tmp_dst != NULL((void *)0))
dst_is_dir = remote_is_dir(conn, tmp_dst);

/* If multiple matches, dst may be directory or unspecified */
if (g.gl_matchc > 1 && tmp_dst && !dst_is_dir) {
error("Multiple paths match, but destination "sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 697, 0
, SYSLOG_LEVEL_ERROR, ((void *)0), "Multiple paths match, but destination "
 "\"%s\" is not a directory", tmp_dst)
    "\"%s\" is not a directory", tmp_dst)sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 697, 0
, SYSLOG_LEVEL_ERROR, ((void *)0), "Multiple paths match, but destination "
 "\"%s\" is not a directory", tmp_dst);
err = -1;
goto out;
}

for (i = 0; g.gl_pathv[i] && !interrupted; i++) {
if (stat(g.gl_pathv[i], &sb) == -1) {
	err = -1;
	error("stat %s: %s", g.gl_pathv[i], strerror(errno))sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 705, 0
, SYSLOG_LEVEL_ERROR, ((void *)0), "stat %s: %s", g.gl_pathv[
i], strerror((*__errno())));
	continue;
}

tmp = xstrdup(g.gl_pathv[i]);
if ((filename = basename(tmp)) == NULL((void *)0)) {
	error("basename %s: %s", tmp, strerror(errno))sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 711, 0
, SYSLOG_LEVEL_ERROR, ((void *)0), "basename %s: %s", tmp, strerror
((*__errno())));
	free(tmp);
	err = -1;
	goto out;
}

if (g.gl_matchc == 1 && tmp_dst) {
	/* If directory specified, append filename */
	if (dst_is_dir)
		abs_dst = path_append(tmp_dst, filename);
	else
		abs_dst = xstrdup(tmp_dst);
} else if (tmp_dst) {
	abs_dst = path_append(tmp_dst, filename);
} else {
	abs_dst = make_absolute(xstrdup(filename), pwd);
}
free(tmp);

resume |= global_aflag;
if (!quiet && resume)
	mprintf("Resuming upload of %s to %s\n",
	    g.gl_pathv[i], abs_dst);
else if (!quiet && !resume)
	mprintf("Uploading %s to %s\n",
	    g.gl_pathv[i], abs_dst);
/* XXX follow_link_flag */
if (globpath_is_dir(g.gl_pathv[i]) && (rflag || global_rflag)) {
	if (upload_dir(conn, g.gl_pathv[i], abs_dst,
	    pflag || global_pflag, 1, resume,
	    fflag || global_fflag, 0) == -1)
		err = -1;
} else {
	if (do_upload(conn, g.gl_pathv[i], abs_dst,
	    pflag || global_pflag, resume,
	    fflag || global_fflag) == -1)
		err = -1;
}
}

751out:
free(abs_dst);
free(tmp_dst);
globfree(&g);
return(err);
756}

758static int
759sdirent_comp(const void *aa, const void *bb)
760{
SFTP_DIRENT *a = *(SFTP_DIRENT **)aa;
SFTP_DIRENT *b = *(SFTP_DIRENT **)bb;
int rmul = sort_flag & LS_REVERSE_SORT0x0040 ? -1 : 1;

765#define NCMP(a,b)(a == b ? 0 : (a < b ? 1 : -1)) (a == b ? 0 : (a < b ? 1 : -1))
if (sort_flag & LS_NAME_SORT0x0008)
return (rmul * strcmp(a->filename, b->filename));
else if (sort_flag & LS_TIME_SORT0x0010)
return (rmul * NCMP(a->a.mtime, b->a.mtime)(a->a.mtime == b->a.mtime ? 0 : (a->a.mtime < b->
a.mtime ? 1 : -1)));
else if (sort_flag & LS_SIZE_SORT0x0020)
return (rmul * NCMP(a->a.size, b->a.size)(a->a.size == b->a.size ? 0 : (a->a.size < b->
a.size ? 1 : -1)));

fatal("Unknown ls sort type")sshfatal("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 773
, 0, SYSLOG_LEVEL_FATAL, ((void *)0), "Unknown ls sort type");
774}

776/* sftp ls.1 replacement for directories */
777static int
778do_ls_dir(struct sftp_conn *conn, const char *path,
  const char *strip_path, int lflag)
780{
int n;
u_int c = 1, colspace = 0, columns = 1;
SFTP_DIRENT **d;

if ((n = do_readdir(conn, path, &d)) != 0)
return (n);

if (!(lflag & LS_SHORT_VIEW0x0002)) {
u_int m = 0, width = 80;
struct winsize ws;
char *tmp;

/* Count entries for sort and find longest filename */
for (n = 0; d[n] != NULL((void *)0); n++) {
	if (d[n]->filename[0] != '.' || (lflag & LS_SHOW_ALL0x0080))
		m = MAXIMUM(m, strlen(d[n]->filename))(((m) > (strlen(d[n]->filename))) ? (m) : (strlen(d[n]->
filename)));
}

/* Add any subpath that also needs to be counted */
tmp = path_strip(path, strip_path);
m += strlen(tmp);
free(tmp);

if (ioctl(fileno(stdin)(!__isthreaded ? (((&__sF[0]))->_file) : (fileno)((&
__sF[0]))), TIOCGWINSZ((unsigned long)0x40000000 | ((sizeof(struct winsize) & 0x1fff
) << 16) | ((('t')) << 8) | ((104))), &ws) != -1)
	width = ws.ws_col;

columns = width / (m + 2);
columns = MAXIMUM(columns, 1)(((columns) > (1)) ? (columns) : (1));
colspace = width / columns;
colspace = MINIMUM(colspace, width)(((colspace) < (width)) ? (colspace) : (width));
}

if (lflag & SORT_FLAGS(0x0008|0x0010|0x0020)) {
for (n = 0; d[n] != NULL((void *)0); n++)
	;	/* count entries */
sort_flag = lflag & (SORT_FLAGS(0x0008|0x0010|0x0020)|LS_REVERSE_SORT0x0040);
qsort(d, n, sizeof(*d), sdirent_comp);
}

for (n = 0; d[n] != NULL((void *)0) && !interrupted; n++) {
char *tmp, *fname;

if (d[n]->filename[0] == '.' && !(lflag & LS_SHOW_ALL0x0080))
	continue;

tmp = path_append(path, d[n]->filename);
fname = path_strip(tmp, strip_path);
free(tmp);

if (lflag & LS_LONG_VIEW0x0001) {
	if (lflag & (LS_NUMERIC_VIEW0x0004|LS_SI_UNITS0x0100)) {
		char *lname;
		struct stat sb;

		memset(&sb, 0, sizeof(sb));
		attrib_to_stat(&d[n]->a, &sb);
		lname = ls_file(fname, &sb, 1,
		    (lflag & LS_SI_UNITS0x0100));
		mprintf("%s\n", lname);
		free(lname);
	} else
		mprintf("%s\n", d[n]->longname);
} else {
	mprintf("%-*s", colspace, fname);
	if (c >= columns) {
		printf("\n");
		c = 1;
	} else
		c++;
}

free(fname);
}

if (!(lflag & LS_LONG_VIEW0x0001) && (c != 1))
printf("\n");

free_sftp_dirents(d);
return (0);
860}

862static int
863sglob_comp(const void *aa, const void *bb)
864{
u_int a = *(const u_int *)aa;
u_int b = *(const u_int *)bb;
const char *ap = sort_glob->gl_pathv[a];
const char *bp = sort_glob->gl_pathv[b];
const struct stat *as = sort_glob->gl_statv[a];
const struct stat *bs = sort_glob->gl_statv[b];
int rmul = sort_flag & LS_REVERSE_SORT0x0040 ? -1 : 1;

873#define NCMP(a,b)(a == b ? 0 : (a < b ? 1 : -1)) (a == b ? 0 : (a < b ? 1 : -1))
if (sort_flag & LS_NAME_SORT0x0008)
return (rmul * strcmp(ap, bp));
else if (sort_flag & LS_TIME_SORT0x0010) {
if (timespeccmp(&as->st_mtim, &bs->st_mtim, ==)(((&as->st_mtim)->tv_sec == (&bs->st_mtim)->
tv_sec) ? ((&as->st_mtim)->tv_nsec == (&bs->
st_mtim)->tv_nsec) : ((&as->st_mtim)->tv_sec == (
&bs->st_mtim)->tv_sec)))
	return 0;
return timespeccmp(&as->st_mtim, &bs->st_mtim, <)(((&as->st_mtim)->tv_sec == (&bs->st_mtim)->
tv_sec) ? ((&as->st_mtim)->tv_nsec < (&bs->
st_mtim)->tv_nsec) : ((&as->st_mtim)->tv_sec <
 (&bs->st_mtim)->tv_sec)) ?
    rmul : -rmul;
} else if (sort_flag & LS_SIZE_SORT0x0020)
return (rmul * NCMP(as->st_size, bs->st_size)(as->st_size == bs->st_size ? 0 : (as->st_size < bs
->st_size ? 1 : -1)));

fatal("Unknown ls sort type")sshfatal("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 884
, 0, SYSLOG_LEVEL_FATAL, ((void *)0), "Unknown ls sort type");
885}

887/* sftp ls.1 replacement which handles path globs */
888static int
889do_globbed_ls(struct sftp_conn *conn, const char *path,
  const char *strip_path, int lflag)
891{
char *fname, *lname;
glob_t g;
int err, r;
struct winsize ws;
u_int i, j, nentries, *indices = NULL((void *)0), c = 1;
u_int colspace = 0, columns = 1, m = 0, width = 80;

memset(&g, 0, sizeof(g));

if ((r = remote_glob(conn, path,
   GLOB_MARK0x0008|GLOB_NOCHECK0x0010|GLOB_BRACE0x0080|GLOB_KEEPSTAT0x4000|GLOB_NOSORT0x0020,
   NULL((void *)0), &g)) != 0 ||
   (g.gl_pathc && !g.gl_matchc)) {
if (g.gl_pathc)
	globfree(&g);
if (r == GLOB_NOSPACE(-1)) {
	error("Can't ls: Too many matches for \"%s\"", path)sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 908, 0
, SYSLOG_LEVEL_ERROR, ((void *)0), "Can't ls: Too many matches for \"%s\""
, path);
} else {
	error("Can't ls: \"%s\" not found", path)sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 910, 0
, SYSLOG_LEVEL_ERROR, ((void *)0), "Can't ls: \"%s\" not found"
, path);
}
return -1;
}

if (interrupted)
goto out;

/*
* If the glob returns a single match and it is a directory,
* then just list its contents.
*/
if (g.gl_matchc == 1 && g.gl_statv[0] != NULL((void *)0) &&
   S_ISDIR(g.gl_statv[0]->st_mode)((g.gl_statv[0]->st_mode & 0170000) == 0040000)) {
err = do_ls_dir(conn, g.gl_pathv[0], strip_path, lflag);
globfree(&g);
return err;
}

if (ioctl(fileno(stdin)(!__isthreaded ? (((&__sF[0]))->_file) : (fileno)((&
__sF[0]))), TIOCGWINSZ((unsigned long)0x40000000 | ((sizeof(struct winsize) & 0x1fff
) << 16) | ((('t')) << 8) | ((104))), &ws) != -1)
width = ws.ws_col;

if (!(lflag & LS_SHORT_VIEW0x0002)) {
/* Count entries for sort and find longest filename */
for (i = 0; g.gl_pathv[i]; i++)
	m = MAXIMUM(m, strlen(g.gl_pathv[i]))(((m) > (strlen(g.gl_pathv[i]))) ? (m) : (strlen(g.gl_pathv
[i])));

columns = width / (m + 2);
columns = MAXIMUM(columns, 1)(((columns) > (1)) ? (columns) : (1));
colspace = width / columns;
}

/*
* Sorting: rather than mess with the contents of glob_t, prepare
* an array of indices into it and sort that. For the usual
* unsorted case, the indices are just the identity 1=1, 2=2, etc.
*/
for (nentries = 0; g.gl_pathv[nentries] != NULL((void *)0); nentries++)
;	/* count entries */
indices = calloc(nentries, sizeof(*indices));
for (i = 0; i < nentries; i++)
indices[i] = i;

if (lflag & SORT_FLAGS(0x0008|0x0010|0x0020)) {
sort_glob = &g;
sort_flag = lflag & (SORT_FLAGS(0x0008|0x0010|0x0020)|LS_REVERSE_SORT0x0040);
qsort(indices, nentries, sizeof(*indices), sglob_comp);
sort_glob = NULL((void *)0);
}

for (j = 0; j < nentries && !interrupted; j++) {
i = indices[j];
fname = path_strip(g.gl_pathv[i], strip_path);
if (lflag & LS_LONG_VIEW0x0001) {
	if (g.gl_statv[i] == NULL((void *)0)) {
		error("no stat information for %s", fname)sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 965, 0
, SYSLOG_LEVEL_ERROR, ((void *)0), "no stat information for %s"
, fname);
		continue;
	}
	lname = ls_file(fname, g.gl_statv[i], 1,
	    (lflag & LS_SI_UNITS0x0100));
	mprintf("%s\n", lname);
	free(lname);
} else {
	mprintf("%-*s", colspace, fname);
	if (c >= columns) {
		printf("\n");
		c = 1;
	} else
		c++;
}
free(fname);
}

if (!(lflag & LS_LONG_VIEW0x0001) && (c != 1))
printf("\n");

out:
if (g.gl_pathc)
globfree(&g);
free(indices);

return 0;
992}

994static int
995do_df(struct sftp_conn *conn, const char *path, int hflag, int iflag)
996{
struct sftp_statvfs st;
char s_used[FMT_SCALED_STRSIZE7], s_avail[FMT_SCALED_STRSIZE7];
char s_root[FMT_SCALED_STRSIZE7], s_total[FMT_SCALED_STRSIZE7];
char s_icapacity[16], s_dcapacity[16];

if (do_statvfs(conn, path, &st, 1) == -1)
return -1;
if (st.f_files == 0)
strlcpy(s_icapacity, "ERR", sizeof(s_icapacity));
else {
snprintf(s_icapacity, sizeof(s_icapacity), "%3llu%%",
    (unsigned long long)(100 * (st.f_files - st.f_ffree) /
    st.f_files));
}
if (st.f_blocks == 0)
strlcpy(s_dcapacity, "ERR", sizeof(s_dcapacity));
else {
snprintf(s_dcapacity, sizeof(s_dcapacity), "%3llu%%",
    (unsigned long long)(100 * (st.f_blocks - st.f_bfree) /
    st.f_blocks));
}
if (iflag) {
printf("     Inodes        Used       Avail      "
    "(root)    %%Capacity\n");
printf("%11llu %11llu %11llu %11llu         %s\n",
    (unsigned long long)st.f_files,
    (unsigned long long)(st.f_files - st.f_ffree),
    (unsigned long long)st.f_favail,
    (unsigned long long)st.f_ffree, s_icapacity);
} else if (hflag) {
strlcpy(s_used, "error", sizeof(s_used));
strlcpy(s_avail, "error", sizeof(s_avail));
strlcpy(s_root, "error", sizeof(s_root));
strlcpy(s_total, "error", sizeof(s_total));
fmt_scaled((st.f_blocks - st.f_bfree) * st.f_frsize, s_used);
fmt_scaled(st.f_bavail * st.f_frsize, s_avail);
fmt_scaled(st.f_bfree * st.f_frsize, s_root);
fmt_scaled(st.f_blocks * st.f_frsize, s_total);
printf("    Size     Used    Avail   (root)    %%Capacity\n");
printf("%7sB %7sB %7sB %7sB         %s\n",
    s_total, s_used, s_avail, s_root, s_dcapacity);
} else {
printf("        Size         Used        Avail       "
    "(root)    %%Capacity\n");
printf("%12llu %12llu %12llu %12llu         %s\n",
    (unsigned long long)(st.f_frsize * st.f_blocks / 1024),
    (unsigned long long)(st.f_frsize *
    (st.f_blocks - st.f_bfree) / 1024),
    (unsigned long long)(st.f_frsize * st.f_bavail / 1024),
    (unsigned long long)(st.f_frsize * st.f_bfree / 1024),
    s_dcapacity);
}
return 0;
1050}

1052/*
* Undo escaping of glob sequences in place. Used to undo extra escaping
* applied in makeargv() when the string is destined for a function that
* does not glob it.
*/
1057static void
1058undo_glob_escape(char *s)
1059{
size_t i, j;

for (i = j = 0;;) {
if (s[i] == '\0') {
	s[j] = '\0';
	return;
}
if (s[i] != '\\') {
	s[j++] = s[i++];
	continue;
}
/* s[i] == '\\' */
++i;
switch (s[i]) {
case '?':
case '[':
case '*':
case '\\':
	s[j++] = s[i++];
	break;
case '\0':
	s[j++] = '\\';
	s[j] = '\0';
	return;
default:
	s[j++] = '\\';
	s[j++] = s[i++];
	break;
}
}
1090}

1092/*
* Split a string into an argument vector using sh(1)-style quoting,
* comment and escaping rules, but with some tweaks to handle glob(3)
* wildcards.
* The "sloppy" flag allows for recovery from missing terminating quote, for
* use in parsing incomplete commandlines during tab autocompletion.
*
* Returns NULL on error or a NULL-terminated array of arguments.
*
* If "lastquote" is not NULL, the quoting character used for the last
* argument is placed in *lastquote ("\0", "'" or "\"").
*
* If "terminated" is not NULL, *terminated will be set to 1 when the
* last argument's quote has been properly terminated or 0 otherwise.
* This parameter is only of use if "sloppy" is set.
*/
1108#define MAXARGS128		128
1109#define MAXARGLEN8192	8192
1110static char **
1111makeargv(const char *arg, int *argcp, int sloppy, char *lastquote,
  u_int *terminated)
1113{
int argc, quot;
size_t i, j;
static char argvs[MAXARGLEN8192];
static char *argv[MAXARGS128 + 1];
enum { MA_START, MA_SQUOTE, MA_DQUOTE, MA_UNQUOTED } state, q;

*argcp = argc = 0;
if (strlen(arg) > sizeof(argvs) - 1) {
args_too_longs:
error("string too long")sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 1123,
 0, SYSLOG_LEVEL_ERROR, ((void *)0), "string too long");
return NULL((void *)0);
}
if (terminated != NULL((void *)0))
*terminated = 1;
if (lastquote != NULL((void *)0))
*lastquote = '\0';
state = MA_START;
i = j = 0;
for (;;) {
if ((size_t)argc >= sizeof(argv) / sizeof(*argv)){
	error("Too many arguments.")sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 1134,
 0, SYSLOG_LEVEL_ERROR, ((void *)0), "Too many arguments.");
	return NULL((void *)0);
}
if (isspace((unsigned char)arg[i])) {
	if (state == MA_UNQUOTED) {
		/* Terminate current argument */
		argvs[j++] = '\0';
		argc++;
		state = MA_START;
	} else if (state != MA_START)
		argvs[j++] = arg[i];
} else if (arg[i] == '"' || arg[i] == '\'') {
	q = arg[i] == '"' ? MA_DQUOTE : MA_SQUOTE;
	if (state == MA_START) {
		argv[argc] = argvs + j;
		state = q;
		if (lastquote != NULL((void *)0))
			*lastquote = arg[i];
	} else if (state == MA_UNQUOTED)
		state = q;
	else if (state == q)
		state = MA_UNQUOTED;
	else
		argvs[j++] = arg[i];
} else if (arg[i] == '\\') {
	if (state == MA_SQUOTE || state == MA_DQUOTE) {
		quot = state == MA_SQUOTE ? '\'' : '"';
		/* Unescape quote we are in */
		/* XXX support \n and friends? */
		if (arg[i + 1] == quot) {
			i++;
			argvs[j++] = arg[i];
		} else if (arg[i + 1] == '?' ||
		    arg[i + 1] == '[' || arg[i + 1] == '*') {
			/*
			 * Special case for sftp: append
			 * double-escaped glob sequence -
			 * glob will undo one level of
			 * escaping. NB. string can grow here.
			 */
			if (j >= sizeof(argvs) - 5)
				goto args_too_longs;
			argvs[j++] = '\\';
			argvs[j++] = arg[i++];
			argvs[j++] = '\\';
			argvs[j++] = arg[i];
		} else {
			argvs[j++] = arg[i++];
			argvs[j++] = arg[i];
		}
	} else {
		if (state == MA_START) {
			argv[argc] = argvs + j;
			state = MA_UNQUOTED;
			if (lastquote != NULL((void *)0))
				*lastquote = '\0';
		}
		if (arg[i + 1] == '?' || arg[i + 1] == '[' ||
		    arg[i + 1] == '*' || arg[i + 1] == '\\') {
			/*
			 * Special case for sftp: append
			 * escaped glob sequence -
			 * glob will undo one level of
			 * escaping.
			 */
			argvs[j++] = arg[i++];
			argvs[j++] = arg[i];
		} else {
			/* Unescape everything */
			/* XXX support \n and friends? */
			i++;
			argvs[j++] = arg[i];
		}
	}
} else if (arg[i] == '#') {
	if (state == MA_SQUOTE || state == MA_DQUOTE)
		argvs[j++] = arg[i];
	else
		goto string_done;
} else if (arg[i] == '\0') {
	if (state == MA_SQUOTE || state == MA_DQUOTE) {
		if (sloppy) {
			state = MA_UNQUOTED;
			if (terminated != NULL((void *)0))
				*terminated = 0;
			goto string_done;
		}
		error("Unterminated quoted argument")sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 1221,
 0, SYSLOG_LEVEL_ERROR, ((void *)0), "Unterminated quoted argument"
);
		return NULL((void *)0);
	}
string_done:
	if (state == MA_UNQUOTED) {
		argvs[j++] = '\0';
		argc++;
	}
	break;
} else {
	if (state == MA_START) {
		argv[argc] = argvs + j;
		state = MA_UNQUOTED;
		if (lastquote != NULL((void *)0))
			*lastquote = '\0';
	}
	if ((state == MA_SQUOTE || state == MA_DQUOTE) &&
	    (arg[i] == '?' || arg[i] == '[' || arg[i] == '*')) {
		/*
		 * Special case for sftp: escape quoted
		 * glob(3) wildcards. NB. string can grow
		 * here.
		 */
		if (j >= sizeof(argvs) - 3)
			goto args_too_longs;
		argvs[j++] = '\\';
		argvs[j++] = arg[i];
	} else
		argvs[j++] = arg[i];
}
i++;
}
*argcp = argc;
return argv;
1255}

1257static int
1258parse_args(const char **cpp, int *ignore_errors, int *disable_echo, int *aflag,
 int *fflag, int *hflag, int *iflag, int *lflag, int *pflag,
 int *rflag, int *sflag,
  unsigned long *n_arg, char **path1, char **path2)
1262{
const char *cmd, *cp = *cpp;
char *cp2, **argv;
int base = 0;
long long ll;
int path1_mandatory = 0, i, cmdnum, optidx, argc;

/* Skip leading whitespace */
cp = cp + strspn(cp, WHITESPACE" \t\r\n");

/*
* Check for leading '-' (disable error processing) and '@' (suppress
* command echo)
*/
*ignore_errors = 0;
*disable_echo = 0;
for (;*cp != '\0'; cp++) {
1
Loop condition is false. Execution continues on line 1288→
if (*cp == '-') {
	*ignore_errors = 1;
} else if (*cp == '@') {
	*disable_echo = 1;
} else {
	/* all other characters terminate prefix processing */
	break;
}
}
cp = cp + strspn(cp, WHITESPACE" \t\r\n");

/* Ignore blank lines and lines which begin with comment '#' char */
if (*cp == '\0' || *cp == '#')
2
←
Assuming the condition is false→
3
←
Assuming the condition is false→
4
←
Taking false branch→
return (0);

if ((argv = makeargv(cp, &argc, 0, NULL((void *)0), NULL((void *)0))) == NULL((void *)0))
5
←
Value assigned to field 'c'→
6
←
Assuming the condition is false→
7
←
Taking false branch→
return -1;

/* Figure out which command we have */
for (i = 0; cmds[i].c != NULL((void *)0); i++) {
8
←
Assuming field 'c' is equal to NULL→
9
←
Loop condition is false. Execution continues on line 1302→
if (argv[0] != NULL((void *)0) && strcasecmp(cmds[i].c, argv[0]) == 0)
	break;
}
cmdnum = cmds[i].n;
cmd = cmds[i].c;
10
←
Null pointer value stored to 'cmd'→

/* Special case */
if (*cp == '!') {
11
←
Assuming the condition is false→
12
←
Taking false branch→
cp++;
cmdnum = I_SHELL;
} else if (cmdnum == -1) {
13
←
Assuming the condition is false→
14
←
Taking false branch→
error("Invalid command.")sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 1310,
 0, SYSLOG_LEVEL_ERROR, ((void *)0), "Invalid command.");
return -1;
}

/* Get arguments and parse flags */
*aflag = *fflag = *hflag = *iflag = *lflag = *pflag = 0;
*rflag = *sflag = 0;
*path1 = *path2 = NULL((void *)0);
optidx = 1;
switch (cmdnum) {
15
←
Control jumps to 'case I_LLS:'  at line 1406→
case I_GET:
case I_REGET:
case I_REPUT:
case I_PUT:
if ((optidx = parse_getput_flags(cmd, argv, argc,
    aflag, fflag, pflag, rflag)) == -1)
	return -1;
/* Get first pathname (mandatory) */
if (argc - optidx < 1) {
	error("You must specify at least one path after a "sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 1330,
 0, SYSLOG_LEVEL_ERROR, ((void *)0), "You must specify at least one path after a "
 "%s command.", cmd)
	    "%s command.", cmd)sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 1330,
 0, SYSLOG_LEVEL_ERROR, ((void *)0), "You must specify at least one path after a "
 "%s command.", cmd);
	return -1;
}
*path1 = xstrdup(argv[optidx]);
/* Get second pathname (optional) */
if (argc - optidx > 1) {
	*path2 = xstrdup(argv[optidx + 1]);
	/* Destination is not globbed */
	undo_glob_escape(*path2);
}
break;
case I_LINK:
if ((optidx = parse_link_flags(cmd, argv, argc, sflag)) == -1)
	return -1;
goto parse_two_paths;
case I_RENAME:
if ((optidx = parse_rename_flags(cmd, argv, argc, lflag)) == -1)
	return -1;
goto parse_two_paths;
case I_SYMLINK:
if ((optidx = parse_no_flags(cmd, argv, argc)) == -1)
	return -1;
parse_two_paths:
if (argc - optidx < 2) {
	error("You must specify two paths after a %s "sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 1355,
 0, SYSLOG_LEVEL_ERROR, ((void *)0), "You must specify two paths after a %s "
 "command.", cmd)
	    "command.", cmd)sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 1355,
 0, SYSLOG_LEVEL_ERROR, ((void *)0), "You must specify two paths after a %s "
 "command.", cmd);
	return -1;
}
*path1 = xstrdup(argv[optidx]);
*path2 = xstrdup(argv[optidx + 1]);
/* Paths are not globbed */
undo_glob_escape(*path1);
undo_glob_escape(*path2);
break;
case I_RM:
case I_MKDIR:
case I_RMDIR:
case I_LMKDIR:
path1_mandatory = 1;
/* FALLTHROUGH */
case I_CHDIR:
case I_LCHDIR:
if ((optidx = parse_no_flags(cmd, argv, argc)) == -1)
	return -1;
/* Get pathname (mandatory) */
if (argc - optidx < 1) {
	if (!path1_mandatory)
		break; /* return a NULL path1 */
	error("You must specify a path after a %s command.",sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 1379,
 0, SYSLOG_LEVEL_ERROR, ((void *)0), "You must specify a path after a %s command."
, cmd)
	    cmd)sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 1379,
 0, SYSLOG_LEVEL_ERROR, ((void *)0), "You must specify a path after a %s command."
, cmd);
	return -1;
}
*path1 = xstrdup(argv[optidx]);
/* Only "rm" globs */
if (cmdnum != I_RM)
	undo_glob_escape(*path1);
break;
case I_DF:
if ((optidx = parse_df_flags(cmd, argv, argc, hflag,
    iflag)) == -1)
	return -1;
/* Default to current directory if no path specified */
if (argc - optidx < 1)
	*path1 = NULL((void *)0);
else {
	*path1 = xstrdup(argv[optidx]);
	undo_glob_escape(*path1);
}
break;
case I_LS:
if ((optidx = parse_ls_flags(argv, argc, lflag)) == -1)
	return(-1);
/* Path is optional */
if (argc - optidx > 0)
	*path1 = xstrdup(argv[optidx]);
break;
case I_LLS:
/* Skip ls command and following whitespace */
cp = cp + strlen(cmd) + strspn(cp, WHITESPACE" \t\r\n");
16
←
Null pointer passed as 1st argument to string length function
case I_SHELL:
/* Uses the rest of the line */
break;
case I_LUMASK:
case I_CHMOD:
base = 8;
/* FALLTHROUGH */
case I_CHOWN:
case I_CHGRP:
if ((optidx = parse_ch_flags(cmd, argv, argc, hflag)) == -1)
	return -1;
/* Get numeric arg (mandatory) */
if (argc - optidx < 1)
	goto need_num_arg;
errno(*__errno()) = 0;
ll = strtoll(argv[optidx], &cp2, base);
if (cp2 == argv[optidx] || *cp2 != '\0' ||
    ((ll == LLONG_MIN(-9223372036854775807LL -1LL) || ll == LLONG_MAX9223372036854775807LL) && errno(*__errno()) == ERANGE34) ||
    ll < 0 || ll > UINT32_MAX0xffffffffU) {
need_num_arg:
	error("You must supply a numeric argument "sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 1430,
 0, SYSLOG_LEVEL_ERROR, ((void *)0), "You must supply a numeric argument "
 "to the %s command.", cmd)
	    "to the %s command.", cmd)sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 1430,
 0, SYSLOG_LEVEL_ERROR, ((void *)0), "You must supply a numeric argument "
 "to the %s command.", cmd);
	return -1;
}
*n_arg = ll;
if (cmdnum == I_LUMASK)
	break;
/* Get pathname (mandatory) */
if (argc - optidx < 2) {
	error("You must specify a path after a %s command.",sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 1439,
 0, SYSLOG_LEVEL_ERROR, ((void *)0), "You must specify a path after a %s command."
, cmd)
	    cmd)sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 1439,
 0, SYSLOG_LEVEL_ERROR, ((void *)0), "You must specify a path after a %s command."
, cmd);
	return -1;
}
*path1 = xstrdup(argv[optidx + 1]);
break;
case I_QUIT:
case I_PWD:
case I_LPWD:
case I_HELP:
case I_VERSION:
case I_PROGRESS:
if ((optidx = parse_no_flags(cmd, argv, argc)) == -1)
	return -1;
break;
default:
fatal("Command not implemented")sshfatal("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 1454
, 0, SYSLOG_LEVEL_FATAL, ((void *)0), "Command not implemented"
);
}

*cpp = cp;
return(cmdnum);
1459}

1461static int
1462parse_dispatch_command(struct sftp_conn *conn, const char *cmd, char **pwd,
  const char *startdir, int err_abort, int echo_command)
1464{
const char *ocmd = cmd;
char *path1, *path2, *tmp;
int ignore_errors = 0, disable_echo = 1;
int aflag = 0, fflag = 0, hflag = 0, iflag = 0;
int lflag = 0, pflag = 0, rflag = 0, sflag = 0;
int cmdnum, i;
unsigned long n_arg = 0;
Attrib a, *aa;
char path_buf[PATH_MAX1024];
int err = 0;
glob_t g;

path1 = path2 = NULL((void *)0);
cmdnum = parse_args(&cmd, &ignore_errors, &disable_echo, &aflag, &fflag,
   &hflag, &iflag, &lflag, &pflag, &rflag, &sflag, &n_arg,
   &path1, &path2);
if (ignore_errors != 0)
err_abort = 0;

if (echo_command && !disable_echo)
mprintf("sftp> %s\n", ocmd);

memset(&g, 0, sizeof(g));

/* Perform command */
switch (cmdnum) {
case 0:
/* Blank line */
break;
case -1:
/* Unrecognized command */
err = -1;
break;
case I_REGET:
aflag = 1;
/* FALLTHROUGH */
case I_GET:
err = process_get(conn, path1, path2, *pwd, pflag,
    rflag, aflag, fflag);
break;
case I_REPUT:
aflag = 1;
/* FALLTHROUGH */
case I_PUT:
err = process_put(conn, path1, path2, *pwd, pflag,
    rflag, aflag, fflag);
break;
case I_RENAME:
path1 = make_absolute(path1, *pwd);
path2 = make_absolute(path2, *pwd);
err = do_rename(conn, path1, path2, lflag);
break;
case I_SYMLINK:
sflag = 1;
/* FALLTHROUGH */
case I_LINK:
if (!sflag)
	path1 = make_absolute(path1, *pwd);
path2 = make_absolute(path2, *pwd);
err = (sflag ? do_symlink : do_hardlink)(conn, path1, path2);
break;
case I_RM:
path1 = make_absolute(path1, *pwd);
remote_glob(conn, path1, GLOB_NOCHECK0x0010, NULL((void *)0), &g);
for (i = 0; g.gl_pathv[i] && !interrupted; i++) {
	if (!quiet)
		mprintf("Removing %s\n", g.gl_pathv[i]);
	err = do_rm(conn, g.gl_pathv[i]);
	if (err != 0 && err_abort)
		break;
}
break;
case I_MKDIR:
path1 = make_absolute(path1, *pwd);
attrib_clear(&a);
a.flags |= SSH2_FILEXFER_ATTR_PERMISSIONS0x00000004;
a.perm = 0777;
err = do_mkdir(conn, path1, &a, 1);
break;
case I_RMDIR:
path1 = make_absolute(path1, *pwd);
err = do_rmdir(conn, path1);
break;
case I_CHDIR:
if (path1 == NULL((void *)0) || *path1 == '\0')
	path1 = xstrdup(startdir);
path1 = make_absolute(path1, *pwd);
if ((tmp = do_realpath(conn, path1)) == NULL((void *)0)) {
	err = 1;
	break;
}
if ((aa = do_stat(conn, tmp, 0)) == NULL((void *)0)) {
	free(tmp);
	err = 1;
	break;
}
if (!(aa->flags & SSH2_FILEXFER_ATTR_PERMISSIONS0x00000004)) {
	error("Can't change directory: Can't check target")sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 1562,
 0, SYSLOG_LEVEL_ERROR, ((void *)0), "Can't change directory: Can't check target"
);
	free(tmp);
	err = 1;
	break;
}
if (!S_ISDIR(aa->perm)((aa->perm & 0170000) == 0040000)) {
	error("Can't change directory: \"%s\" is not "sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 1569,
 0, SYSLOG_LEVEL_ERROR, ((void *)0), "Can't change directory: \"%s\" is not "
 "a directory", tmp)
	    "a directory", tmp)sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 1569,
 0, SYSLOG_LEVEL_ERROR, ((void *)0), "Can't change directory: \"%s\" is not "
 "a directory", tmp);
	free(tmp);
	err = 1;
	break;
}
free(*pwd);
*pwd = tmp;
break;
case I_LS:
if (!path1) {
	do_ls_dir(conn, *pwd, *pwd, lflag);
	break;
}

/* Strip pwd off beginning of non-absolute paths */
tmp = NULL((void *)0);
if (!path_absolute(path1))
	tmp = *pwd;

path1 = make_absolute(path1, *pwd);
err = do_globbed_ls(conn, path1, tmp, lflag);
break;
case I_DF:
/* Default to current directory if no path specified */
if (path1 == NULL((void *)0))
	path1 = xstrdup(*pwd);
path1 = make_absolute(path1, *pwd);
err = do_df(conn, path1, hflag, iflag);
break;
case I_LCHDIR:
if (path1 == NULL((void *)0) || *path1 == '\0')
	path1 = xstrdup("~");
tmp = tilde_expand_filename(path1, getuid());
free(path1);
path1 = tmp;
if (chdir(path1) == -1) {
	error("Couldn't change local directory to "sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 1606,
 0, SYSLOG_LEVEL_ERROR, ((void *)0), "Couldn't change local directory to "
 "\"%s\": %s", path1, strerror((*__errno())))
	    "\"%s\": %s", path1, strerror(errno))sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 1606,
 0, SYSLOG_LEVEL_ERROR, ((void *)0), "Couldn't change local directory to "
 "\"%s\": %s", path1, strerror((*__errno())));
	err = 1;
}
break;
case I_LMKDIR:
if (mkdir(path1, 0777) == -1) {
	error("Couldn't create local directory "sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 1613,
 0, SYSLOG_LEVEL_ERROR, ((void *)0), "Couldn't create local directory "
 "\"%s\": %s", path1, strerror((*__errno())))
	    "\"%s\": %s", path1, strerror(errno))sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 1613,
 0, SYSLOG_LEVEL_ERROR, ((void *)0), "Couldn't create local directory "
 "\"%s\": %s", path1, strerror((*__errno())));
	err = 1;
}
break;
case I_LLS:
local_do_ls(cmd);
break;
case I_SHELL:
local_do_shell(cmd);
break;
case I_LUMASK:
umask(n_arg);
printf("Local umask: %03lo\n", n_arg);
break;
case I_CHMOD:
path1 = make_absolute(path1, *pwd);
attrib_clear(&a);
a.flags |= SSH2_FILEXFER_ATTR_PERMISSIONS0x00000004;
a.perm = n_arg;
remote_glob(conn, path1, GLOB_NOCHECK0x0010, NULL((void *)0), &g);
for (i = 0; g.gl_pathv[i] && !interrupted; i++) {
	if (!quiet)
		mprintf("Changing mode on %s\n",
		    g.gl_pathv[i]);
	err = (hflag ? do_lsetstat : do_setstat)(conn,
	    g.gl_pathv[i], &a);
	if (err != 0 && err_abort)
		break;
}
break;
case I_CHOWN:
case I_CHGRP:
path1 = make_absolute(path1, *pwd);
remote_glob(conn, path1, GLOB_NOCHECK0x0010, NULL((void *)0), &g);
for (i = 0; g.gl_pathv[i] && !interrupted; i++) {
	if (!(aa = (hflag ? do_lstat : do_stat)(conn,
	    g.gl_pathv[i], 0))) {
		if (err_abort) {
			err = -1;
			break;
		} else
			continue;
	}
	if (!(aa->flags & SSH2_FILEXFER_ATTR_UIDGID0x00000002)) {
		error("Can't get current ownership of "sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 1658,
 0, SYSLOG_LEVEL_ERROR, ((void *)0), "Can't get current ownership of "
 "remote file \"%s\"", g.gl_pathv[i])
		    "remote file \"%s\"", g.gl_pathv[i])sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 1658,
 0, SYSLOG_LEVEL_ERROR, ((void *)0), "Can't get current ownership of "
 "remote file \"%s\"", g.gl_pathv[i]);
		if (err_abort) {
			err = -1;
			break;
		} else
			continue;
	}
	aa->flags &= SSH2_FILEXFER_ATTR_UIDGID0x00000002;
	if (cmdnum == I_CHOWN) {
		if (!quiet)
			mprintf("Changing owner on %s\n",
			    g.gl_pathv[i]);
		aa->uid = n_arg;
	} else {
		if (!quiet)
			mprintf("Changing group on %s\n",
			    g.gl_pathv[i]);
		aa->gid = n_arg;
	}
	err = (hflag ? do_lsetstat : do_setstat)(conn,
	    g.gl_pathv[i], aa);
	if (err != 0 && err_abort)
		break;
}
break;
case I_PWD:
mprintf("Remote working directory: %s\n", *pwd);
break;
case I_LPWD:
if (!getcwd(path_buf, sizeof(path_buf))) {
	error("Couldn't get local cwd: %s", strerror(errno))sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 1688,
 0, SYSLOG_LEVEL_ERROR, ((void *)0), "Couldn't get local cwd: %s"
, strerror((*__errno())));
	err = -1;
	break;
}
mprintf("Local working directory: %s\n", path_buf);
break;
case I_QUIT:
/* Processed below */
break;
case I_HELP:
help();
break;
case I_VERSION:
printf("SFTP protocol version %u\n", sftp_proto_version(conn));
break;
case I_PROGRESS:
showprogress = !showprogress;
if (showprogress)
	printf("Progress meter enabled\n");
else
	printf("Progress meter disabled\n");
break;
default:
fatal("%d is not implemented", cmdnum)sshfatal("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 1711
, 0, SYSLOG_LEVEL_FATAL, ((void *)0), "%d is not implemented"
, cmdnum);
}

if (g.gl_pathc)
globfree(&g);
free(path1);
free(path2);

/* If an unignored error occurs in batch mode we should abort. */
if (err_abort && err != 0)
return (-1);
else if (cmdnum == I_QUIT)
return (1);

return (0);
1726}

1728static char *
1729prompt(EditLine *el)
1730{
return ("sftp> ");
1732}

1734/* Display entries in 'list' after skipping the first 'len' chars */
1735static void
1736complete_display(char **list, u_int len)
1737{
u_int y, m = 0, width = 80, columns = 1, colspace = 0, llen;
struct winsize ws;
char *tmp;

/* Count entries for sort and find longest */
for (y = 0; list[y]; y++)
m = MAXIMUM(m, strlen(list[y]))(((m) > (strlen(list[y]))) ? (m) : (strlen(list[y])));

if (ioctl(fileno(stdin)(!__isthreaded ? (((&__sF[0]))->_file) : (fileno)((&
__sF[0]))), TIOCGWINSZ((unsigned long)0x40000000 | ((sizeof(struct winsize) & 0x1fff
) << 16) | ((('t')) << 8) | ((104))), &ws) != -1)
width = ws.ws_col;

m = m > len ? m - len : 0;
columns = width / (m + 2);
columns = MAXIMUM(columns, 1)(((columns) > (1)) ? (columns) : (1));
colspace = width / columns;
colspace = MINIMUM(colspace, width)(((colspace) < (width)) ? (colspace) : (width));

printf("\n");
m = 1;
for (y = 0; list[y]; y++) {
llen = strlen(list[y]);
tmp = llen > len ? list[y] + len : "";
mprintf("%-*s", colspace, tmp);
if (m >= columns) {
	printf("\n");
	m = 1;
} else
	m++;
}
printf("\n");
1768}

1770/*
* Given a "list" of words that begin with a common prefix of "word",
* attempt to find an autocompletion to extends "word" by the next
* characters common to all entries in "list".
*/
1775static char *
1776complete_ambiguous(const char *word, char **list, size_t count)
1777{
if (word == NULL((void *)0))
return NULL((void *)0);

if (count > 0) {
u_int y, matchlen = strlen(list[0]);

/* Find length of common stem */
for (y = 1; list[y]; y++) {
	u_int x;

	for (x = 0; x < matchlen; x++)
		if (list[0][x] != list[y][x])
			break;

	matchlen = x;
}

if (matchlen > strlen(word)) {
	char *tmp = xstrdup(list[0]);

	tmp[matchlen] = '\0';
	return tmp;
}
}

return xstrdup(word);
1804}

1806/* Autocomplete a sftp command */
1807static int
1808complete_cmd_parse(EditLine *el, char *cmd, int lastarg, char quote,
  int terminated)
1810{
u_int y, count = 0, cmdlen, tmplen;
char *tmp, **list, argterm[3];
const LineInfo *lf;

list = xcalloc((sizeof(cmds) / sizeof(*cmds)) + 1, sizeof(char *));

/* No command specified: display all available commands */
if (cmd == NULL((void *)0)) {
for (y = 0; cmds[y].c; y++)
	list[count++] = xstrdup(cmds[y].c);

list[count] = NULL((void *)0);
complete_display(list, 0);

for (y = 0; list[y] != NULL((void *)0); y++)
	free(list[y]);
free(list);
return count;
}

/* Prepare subset of commands that start with "cmd" */
cmdlen = strlen(cmd);
for (y = 0; cmds[y].c; y++)  {
if (!strncasecmp(cmd, cmds[y].c, cmdlen))
	list[count++] = xstrdup(cmds[y].c);
}
list[count] = NULL((void *)0);

if (count == 0) {
free(list);
return 0;
}

/* Complete ambiguous command */
tmp = complete_ambiguous(cmd, list, count);
if (count > 1)
complete_display(list, 0);

for (y = 0; list[y]; y++)
free(list[y]);
free(list);

if (tmp != NULL((void *)0)) {
tmplen = strlen(tmp);
cmdlen = strlen(cmd);
/* If cmd may be extended then do so */
if (tmplen > cmdlen)
	if (el_insertstr(el, tmp + cmdlen) == -1)
		fatal("el_insertstr failed.")sshfatal("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 1859
, 0, SYSLOG_LEVEL_FATAL, ((void *)0), "el_insertstr failed.");
lf = el_line(el);
/* Terminate argument cleanly */
if (count == 1) {
	y = 0;
	if (!terminated)
		argterm[y++] = quote;
	if (lastarg || *(lf->cursor) != ' ')
		argterm[y++] = ' ';
	argterm[y] = '\0';
	if (y > 0 && el_insertstr(el, argterm) == -1)
		fatal("el_insertstr failed.")sshfatal("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 1870
, 0, SYSLOG_LEVEL_FATAL, ((void *)0), "el_insertstr failed.");
}
free(tmp);
}

return count;
1876}

1878/*
* Determine whether a particular sftp command's arguments (if any)
* represent local or remote files.
*/
1882static int
1883complete_is_remote(char *cmd) {
int i;

if (cmd == NULL((void *)0))
return -1;

for (i = 0; cmds[i].c; i++) {
if (!strncasecmp(cmd, cmds[i].c, strlen(cmds[i].c)))
	return cmds[i].t;
}

return -1;
1895}

1897/* Autocomplete a filename "file" */
1898static int
1899complete_match(EditLine *el, struct sftp_conn *conn, char *remote_path,
  char *file, int remote, int lastarg, char quote, int terminated)
1901{
glob_t g;
char *tmp, *tmp2, ins[8];
u_int i, hadglob, pwdlen, len, tmplen, filelen, cesc, isesc, isabs;
int clen;
const LineInfo *lf;

/* Glob from "file" location */
if (file == NULL((void *)0))
tmp = xstrdup("*");
else
xasprintf(&tmp, "%s*", file);

/* Check if the path is absolute. */
isabs = path_absolute(tmp);

memset(&g, 0, sizeof(g));
if (remote != LOCAL2) {
tmp = make_absolute(tmp, remote_path);
remote_glob(conn, tmp, GLOB_DOOFFS0x0002|GLOB_MARK0x0008, NULL((void *)0), &g);
} else
glob(tmp, GLOB_DOOFFS0x0002|GLOB_MARK0x0008, NULL((void *)0), &g);

/* Determine length of pwd so we can trim completion display */
for (hadglob = tmplen = pwdlen = 0; tmp[tmplen] != 0; tmplen++) {
/* Terminate counting on first unescaped glob metacharacter */
if (tmp[tmplen] == '*' || tmp[tmplen] == '?') {
	if (tmp[tmplen] != '*' || tmp[tmplen + 1] != '\0')
		hadglob = 1;
	break;
}
if (tmp[tmplen] == '\\' && tmp[tmplen + 1] != '\0')
	tmplen++;
if (tmp[tmplen] == '/')
	pwdlen = tmplen + 1;	/* track last seen '/' */
}
free(tmp);
tmp = NULL((void *)0);

if (g.gl_matchc == 0)
goto out;

if (g.gl_matchc > 1)
complete_display(g.gl_pathv, pwdlen);

/* Don't try to extend globs */
if (file == NULL((void *)0) || hadglob)
goto out;

tmp2 = complete_ambiguous(file, g.gl_pathv, g.gl_matchc);
tmp = path_strip(tmp2, isabs ? NULL((void *)0) : remote_path);
free(tmp2);

if (tmp == NULL((void *)0))
goto out;

tmplen = strlen(tmp);
filelen = strlen(file);

/* Count the number of escaped characters in the input string. */
cesc = isesc = 0;
for (i = 0; i < filelen; i++) {
if (!isesc && file[i] == '\\' && i + 1 < filelen){
	isesc = 1;
	cesc++;
} else
	isesc = 0;
}

if (tmplen > (filelen - cesc)) {
tmp2 = tmp + filelen - cesc;
len = strlen(tmp2);
/* quote argument on way out */
for (i = 0; i < len; i += clen) {
	if ((clen = mblen(tmp2 + i, len - i)) < 0 ||
	    (size_t)clen > sizeof(ins) - 2)
		fatal("invalid multibyte character")sshfatal("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 1977
, 0, SYSLOG_LEVEL_FATAL, ((void *)0), "invalid multibyte character"
);
	ins[0] = '\\';
	memcpy(ins + 1, tmp2 + i, clen);
	ins[clen + 1] = '\0';
	switch (tmp2[i]) {
	case '\'':
	case '"':
	case '\\':
	case '\t':
	case '[':
	case ' ':
	case '#':
	case '*':
		if (quote == '\0' || tmp2[i] == quote) {
			if (el_insertstr(el, ins) == -1)
				fatal("el_insertstr "sshfatal("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 1993
, 0, SYSLOG_LEVEL_FATAL, ((void *)0), "el_insertstr " "failed."
)
				    "failed.")sshfatal("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 1993
, 0, SYSLOG_LEVEL_FATAL, ((void *)0), "el_insertstr " "failed."
);
			break;
		}
		/* FALLTHROUGH */
	default:
		if (el_insertstr(el, ins + 1) == -1)
			fatal("el_insertstr failed.")sshfatal("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 1999
, 0, SYSLOG_LEVEL_FATAL, ((void *)0), "el_insertstr failed.");
		break;
	}
}
}

lf = el_line(el);
if (g.gl_matchc == 1) {
i = 0;
if (!terminated && quote != '\0')
	ins[i++] = quote;
if (*(lf->cursor - 1) != '/' &&
    (lastarg || *(lf->cursor) != ' '))
	ins[i++] = ' ';
ins[i] = '\0';
if (i > 0 && el_insertstr(el, ins) == -1)
	fatal("el_insertstr failed.")sshfatal("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 2015
, 0, SYSLOG_LEVEL_FATAL, ((void *)0), "el_insertstr failed.");
}
free(tmp);

out:
globfree(&g);
return g.gl_matchc;
2022}

2024/* tab-completion hook function, called via libedit */
2025static unsigned char
2026complete(EditLine *el, int ch)
2027{
char **argv, *line, quote;
int argc, carg;
u_int cursor, len, terminated, ret = CC_ERROR6;
const LineInfo *lf;
struct complete_ctx *complete_ctx;

lf = el_line(el);
if (el_get(el, EL_CLIENTDATA14, (void**)&complete_ctx) != 0)
fatal_f("el_get failed")sshfatal("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 2036
, 1, SYSLOG_LEVEL_FATAL, ((void *)0), "el_get failed");

/* Figure out which argument the cursor points to */
cursor = lf->cursor - lf->buffer;
line = xmalloc(cursor + 1);
memcpy(line, lf->buffer, cursor);
line[cursor] = '\0';
argv = makeargv(line, &carg, 1, &quote, &terminated);
free(line);

/* Get all the arguments on the line */
len = lf->lastchar - lf->buffer;
line = xmalloc(len + 1);
memcpy(line, lf->buffer, len);
line[len] = '\0';
argv = makeargv(line, &argc, 1, NULL((void *)0), NULL((void *)0));

/* Ensure cursor is at EOL or a argument boundary */
if (line[cursor] != ' ' && line[cursor] != '\0' &&
   line[cursor] != '\n') {
free(line);
return ret;
}

if (carg == 0) {
/* Show all available commands */
complete_cmd_parse(el, NULL((void *)0), argc == carg, '\0', 1);
ret = CC_REDISPLAY8;
} else if (carg == 1 && cursor > 0 && line[cursor - 1] != ' ')  {
/* Handle the command parsing */
if (complete_cmd_parse(el, argv[0], argc == carg,
    quote, terminated) != 0)
	ret = CC_REDISPLAY8;
} else if (carg >= 1) {
/* Handle file parsing */
int remote = complete_is_remote(argv[0]);
char *filematch = NULL((void *)0);

if (carg > 1 && line[cursor-1] != ' ')
	filematch = argv[carg - 1];

if (remote != 0 &&
    complete_match(el, complete_ctx->conn,
    *complete_ctx->remote_pathp, filematch,
    remote, carg == argc, quote, terminated) != 0)
	ret = CC_REDISPLAY8;
}

free(line);
return ret;
2086}

2088static int
2089interactive_loop(struct sftp_conn *conn, char *file1, char *file2)
2090{
char *remote_path;
char *dir = NULL((void *)0), *startdir = NULL((void *)0);
char cmd[2048];
int err, interactive;
EditLine *el = NULL((void *)0);
History *hl = NULL((void *)0);
HistEvent hev;
extern char *__progname;
struct complete_ctx complete_ctx;

if (!batchmode && isatty(STDIN_FILENO0)) {
if ((el = el_init(__progname, stdin(&__sF[0]), stdout(&__sF[1]), stderr(&__sF[2]))) == NULL((void *)0))
	fatal("Couldn't initialise editline")sshfatal("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 2103
, 0, SYSLOG_LEVEL_FATAL, ((void *)0), "Couldn't initialise editline"
);
if ((hl = history_init()) == NULL((void *)0))
	fatal("Couldn't initialise editline history")sshfatal("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 2105
, 0, SYSLOG_LEVEL_FATAL, ((void *)0), "Couldn't initialise editline history"
);
history(hl, &hev, H_SETSIZE1, 100);
el_set(el, EL_HIST10, history, hl);

el_set(el, EL_PROMPT0, prompt);
el_set(el, EL_EDITOR2, "emacs");
el_set(el, EL_TERMINAL1, NULL((void *)0));
el_set(el, EL_SIGNAL3, 1);
el_source(el, NULL((void *)0));

/* Tab Completion */
el_set(el, EL_ADDFN9, "ftp-complete",
    "Context sensitive argument completion", complete);
complete_ctx.conn = conn;
complete_ctx.remote_pathp = &remote_path;
el_set(el, EL_CLIENTDATA14, (void*)&complete_ctx);
el_set(el, EL_BIND4, "^I", "ftp-complete", NULL((void *)0));
/* enable ctrl-left-arrow and ctrl-right-arrow */
el_set(el, EL_BIND4, "\\e[1;5C", "em-next-word", NULL((void *)0));
el_set(el, EL_BIND4, "\\e\\e[C", "em-next-word", NULL((void *)0));
el_set(el, EL_BIND4, "\\e[1;5D", "ed-prev-word", NULL((void *)0));
el_set(el, EL_BIND4, "\\e\\e[D", "ed-prev-word", NULL((void *)0));
/* make ^w match ksh behaviour */
el_set(el, EL_BIND4, "^w", "ed-delete-prev-word", NULL((void *)0));
}

remote_path = do_realpath(conn, ".");
if (remote_path == NULL((void *)0))
fatal("Need cwd")sshfatal("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 2133
, 0, SYSLOG_LEVEL_FATAL, ((void *)0), "Need cwd");
startdir = xstrdup(remote_path);

if (file1 != NULL((void *)0)) {
dir = xstrdup(file1);
dir = make_absolute(dir, remote_path);

if (remote_is_dir(conn, dir) && file2 == NULL((void *)0)) {
	if (!quiet)
		mprintf("Changing to: %s\n", dir);
	snprintf(cmd, sizeof cmd, "cd \"%s\"", dir);
	if (parse_dispatch_command(conn, cmd,
	    &remote_path, startdir, 1, 0) != 0) {
		free(dir);
		free(startdir);
		free(remote_path);
		free(conn);
		return (-1);
	}
} else {
	/* XXX this is wrong wrt quoting */
	snprintf(cmd, sizeof cmd, "get%s %s%s%s",
	    global_aflag ? " -a" : "", dir,
	    file2 == NULL((void *)0) ? "" : " ",
	    file2 == NULL((void *)0) ? "" : file2);
	err = parse_dispatch_command(conn, cmd,
	    &remote_path, startdir, 1, 0);
	free(dir);
	free(startdir);
	free(remote_path);
	free(conn);
	return (err);
}
free(dir);
}

setvbuf(stdout(&__sF[1]), NULL((void *)0), _IOLBF1, 0);
setvbuf(infile, NULL((void *)0), _IOLBF1, 0);

interactive = !batchmode && isatty(STDIN_FILENO0);
err = 0;
for (;;) {
struct sigaction sa;
const char *line;
int count = 0;

interrupted = 0;
memset(&sa, 0, sizeof(sa));
sa.sa_handler__sigaction_u.__sa_handler = interactive ? read_interrupt : killchild;
if (sigaction(SIGINT2, &sa, NULL((void *)0)) == -1) {
	debug3("sigaction(%s): %s", strsignal(SIGINT),sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 2184,
 0, SYSLOG_LEVEL_DEBUG3, ((void *)0), "sigaction(%s): %s", strsignal
(2), strerror((*__errno())))
	    strerror(errno))sshlog("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 2184,
 0, SYSLOG_LEVEL_DEBUG3, ((void *)0), "sigaction(%s): %s", strsignal
(2), strerror((*__errno())));
	break;
}
if (el == NULL((void *)0)) {
	if (interactive)
		printf("sftp> ");
	if (fgets(cmd, sizeof(cmd), infile) == NULL((void *)0)) {
		if (interactive)
			printf("\n");
		if (interrupted)
			continue;
		break;
	}
} else {
	if ((line = el_gets(el, &count)) == NULL((void *)0) ||
	    count <= 0) {
		printf("\n");
		if (interrupted)
			continue;
		break;
	}
	history(hl, &hev, H_ENTER10, line);
	if (strlcpy(cmd, line, sizeof(cmd)) >= sizeof(cmd)) {
		fprintf(stderr(&__sF[2]), "Error: input line too long\n");
		continue;
	}
}

cmd[strcspn(cmd, "\n")] = '\0';

/* Handle user interrupts gracefully during commands */
interrupted = 0;
ssh_signal(SIGINT2, cmd_interrupt);

err = parse_dispatch_command(conn, cmd, &remote_path,
    startdir, batchmode, !interactive && el == NULL((void *)0));
if (err != 0)
	break;
}
ssh_signal(SIGCHLD20, SIG_DFL(void (*)(int))0);
free(remote_path);
free(startdir);
free(conn);

if (el != NULL((void *)0))
el_end(el);

/* err == 1 signifies normal "quit" exit */
return (err >= 0 ? 0 : -1);
2233}

2235static void
2236connect_to_server(char *path, char **args, int *in, int *out)
2237{
int c_in, c_out;

int inout[2];

if (socketpair(AF_UNIX1, SOCK_STREAM1, 0, inout) == -1)
fatal("socketpair: %s", strerror(errno))sshfatal("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 2243
, 0, SYSLOG_LEVEL_FATAL, ((void *)0), "socketpair: %s", strerror
((*__errno())));
*in = *out = inout[0];
c_in = c_out = inout[1];

if ((sshpid = fork()) == -1)
fatal("fork: %s", strerror(errno))sshfatal("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 2248
, 0, SYSLOG_LEVEL_FATAL, ((void *)0), "fork: %s", strerror((*
__errno())));
else if (sshpid == 0) {
if ((dup2(c_in, STDIN_FILENO0) == -1) ||
    (dup2(c_out, STDOUT_FILENO1) == -1)) {
	fprintf(stderr(&__sF[2]), "dup2: %s\n", strerror(errno(*__errno())));
	_exit(1);
}
close(*in);
close(*out);
close(c_in);
close(c_out);

/*
 * The underlying ssh is in the same process group, so we must
 * ignore SIGINT if we want to gracefully abort commands,
 * otherwise the signal will make it to the ssh process and
 * kill it too.  Contrawise, since sftp sends SIGTERMs to the
 * underlying ssh, it must *not* ignore that signal.
 */
ssh_signal(SIGINT2, SIG_IGN(void (*)(int))1);
ssh_signal(SIGTERM15, SIG_DFL(void (*)(int))0);
execvp(path, args);
fprintf(stderr(&__sF[2]), "exec: %s: %s\n", path, strerror(errno(*__errno())));
_exit(1);
}

ssh_signal(SIGTERM15, killchild);
ssh_signal(SIGINT2, killchild);
ssh_signal(SIGHUP1, killchild);
ssh_signal(SIGTSTP18, suspchild);
ssh_signal(SIGTTIN21, suspchild);
ssh_signal(SIGTTOU22, suspchild);
ssh_signal(SIGCHLD20, sigchld_handler);
close(c_in);
close(c_out);
2283}

2285static void
2286usage(void)
2287{
extern char *__progname;

fprintf(stderr(&__sF[2]),
   "usage: %s [-46AaCfNpqrv] [-B buffer_size] [-b batchfile] [-c cipher]\n"
   "          [-D sftp_server_path] [-F ssh_config] [-i identity_file]\n"
   "          [-J destination] [-l limit] [-o ssh_option] [-P port]\n"
   "          [-R num_requests] [-S program] [-s subsystem | sftp_server]\n"
   "          destination\n",
   __progname);
exit(1);
2298}

2300int
2301main(int argc, char **argv)
2302{
int in, out, ch, err, tmp, port = -1, noisy = 0;
char *host = NULL((void *)0), *user, *cp, *file2 = NULL((void *)0);
int debug_level = 0;
char *file1 = NULL((void *)0), *sftp_server = NULL((void *)0);
char *ssh_program = _PATH_SSH_PROGRAM"/usr/bin/ssh", *sftp_direct = NULL((void *)0);
const char *errstr;
LogLevel ll = SYSLOG_LEVEL_INFO;
arglist args;
extern int optind;
extern char *optarg;
struct sftp_conn *conn;
size_t copy_buffer_len = 0;
size_t num_requests = 0;
long long limit_kbps = 0;

/* Ensure that fds 0, 1 and 2 are open or directed to /dev/null */
sanitise_stdfd();
setlocale(LC_CTYPE2, "");

memset(&args, '\0', sizeof(args));
args.list = NULL((void *)0);
addargs(&args, "%s", ssh_program);
addargs(&args, "-oForwardX11 no");
addargs(&args, "-oPermitLocalCommand no");
addargs(&args, "-oClearAllForwardings yes");

ll = SYSLOG_LEVEL_INFO;
infile = stdin(&__sF[0]);

while ((ch = getopt(argc, argv,
   "1246AafhNpqrvCc:D:i:l:o:s:S:b:B:F:J:P:R:")) != -1) {
switch (ch) {
/* Passed through to ssh(1) */
case 'A':
case '4':
case '6':
case 'C':
	addargs(&args, "-%c", ch);
	break;
/* Passed through to ssh(1) with argument */
case 'F':
case 'J':
case 'c':
case 'i':
case 'o':
	addargs(&args, "-%c", ch);
	addargs(&args, "%s", optarg);
	break;
case 'q':
	ll = SYSLOG_LEVEL_ERROR;
	quiet = 1;
	showprogress = 0;
	addargs(&args, "-%c", ch);
	break;
case 'P':
	port = a2port(optarg);
	if (port <= 0)
		fatal("Bad port \"%s\"\n", optarg)sshfatal("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 2360
, 0, SYSLOG_LEVEL_FATAL, ((void *)0), "Bad port \"%s\"\n", optarg
);
	break;
case 'v':
	if (debug_level < 3) {
		addargs(&args, "-v");
		ll = SYSLOG_LEVEL_DEBUG1 + debug_level;
	}
	debug_level++;
	break;
case '1':
	fatal("SSH protocol v.1 is no longer supported")sshfatal("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 2370
, 0, SYSLOG_LEVEL_FATAL, ((void *)0), "SSH protocol v.1 is no longer supported"
);
	break;
case '2':
	/* accept silently */
	break;
case 'a':
	global_aflag = 1;
	break;
case 'B':
	copy_buffer_len = strtol(optarg, &cp, 10);
	if (copy_buffer_len == 0 || *cp != '\0')
		fatal("Invalid buffer size \"%s\"", optarg)sshfatal("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 2381
, 0, SYSLOG_LEVEL_FATAL, ((void *)0), "Invalid buffer size \"%s\""
, optarg);
	break;
case 'b':
	if (batchmode)
		fatal("Batch file already specified.")sshfatal("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 2385
, 0, SYSLOG_LEVEL_FATAL, ((void *)0), "Batch file already specified."
);

	/* Allow "-" as stdin */
	if (strcmp(optarg, "-") != 0 &&
	    (infile = fopen(optarg, "r")) == NULL((void *)0))
		fatal("%s (%s).", strerror(errno), optarg)sshfatal("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 2390
, 0, SYSLOG_LEVEL_FATAL, ((void *)0), "%s (%s).", strerror((*
__errno())), optarg);
	showprogress = 0;
	quiet = batchmode = 1;
	addargs(&args, "-obatchmode yes");
	break;
case 'f':
	global_fflag = 1;
	break;
case 'N':
	noisy = 1; /* Used to clear quiet mode after getopt */
	break;
case 'p':
	global_pflag = 1;
	break;
case 'D':
	sftp_direct = optarg;
	break;
case 'l':
	limit_kbps = strtonum(optarg, 1, 100 * 1024 * 1024,
	    &errstr);
	if (errstr != NULL((void *)0))
		usage();
	limit_kbps *= 1024; /* kbps */
	break;
case 'r':
	global_rflag = 1;
	break;
case 'R':
	num_requests = strtol(optarg, &cp, 10);
	if (num_requests == 0 || *cp != '\0')
		fatal("Invalid number of requests \"%s\"",sshfatal("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 2421
, 0, SYSLOG_LEVEL_FATAL, ((void *)0), "Invalid number of requests \"%s\""
, optarg)
		    optarg)sshfatal("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 2421
, 0, SYSLOG_LEVEL_FATAL, ((void *)0), "Invalid number of requests \"%s\""
, optarg);
	break;
case 's':
	sftp_server = optarg;
	break;
case 'S':
	ssh_program = optarg;
	replacearg(&args, 0, "%s", ssh_program);
	break;
case 'h':
default:
	usage();
}
}

/* Do this last because we want the user to be able to override it */
addargs(&args, "-oForwardAgent no");

if (!isatty(STDERR_FILENO2))
showprogress = 0;

if (noisy)
quiet = 0;

log_init(argv[0], ll, SYSLOG_FACILITY_USER, 1);

if (sftp_direct == NULL((void *)0)) {
if (optind == argc || argc > (optind + 2))
	usage();
argv += optind;

switch (parse_uri("sftp", *argv, &user, &host, &tmp, &file1)) {
case -1:
	usage();
	break;
case 0:
	if (tmp != -1)
		port = tmp;
	break;
default:
	/* Try with user, host and path. */
	if (parse_user_host_path(*argv, &user, &host,
	    &file1) == 0)
		break;
	/* Try with user and host. */
	if (parse_user_host_port(*argv, &user, &host, NULL((void *)0))
	    == 0)
		break;
	/* Treat as a plain hostname. */
	host = xstrdup(*argv);
	host = cleanhostname(host);
	break;
}
file2 = *(argv + 1);

if (!*host) {
	fprintf(stderr(&__sF[2]), "Missing hostname\n");
	usage();
}

if (port != -1)
	addargs(&args, "-oPort %d", port);
if (user != NULL((void *)0)) {
	addargs(&args, "-l");
	addargs(&args, "%s", user);
}

/* no subsystem if the server-spec contains a '/' */
if (sftp_server == NULL((void *)0) || strchr(sftp_server, '/') == NULL((void *)0))
	addargs(&args, "-s");

addargs(&args, "--");
addargs(&args, "%s", host);
addargs(&args, "%s", (sftp_server != NULL((void *)0) ?
    sftp_server : "sftp"));

connect_to_server(ssh_program, args.list, &in, &out);
} else {
args.list = NULL((void *)0);
addargs(&args, "sftp-server");

connect_to_server(sftp_direct, args.list, &in, &out);
}
freeargs(&args);

conn = do_init(in, out, copy_buffer_len, num_requests, limit_kbps);
if (conn == NULL((void *)0))
fatal("Couldn't initialise connection to server")sshfatal("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 2508
, 0, SYSLOG_LEVEL_FATAL, ((void *)0), "Couldn't initialise connection to server"
);

if (!quiet) {
if (sftp_direct == NULL((void *)0))
	fprintf(stderr(&__sF[2]), "Connected to %s.\n", host);
else
	fprintf(stderr(&__sF[2]), "Attached to %s.\n", sftp_direct);
}

err = interactive_loop(conn, file1, file2);

close(in);
close(out);
if (batchmode)
fclose(infile);

while (waitpid(sshpid, NULL((void *)0), 0) == -1 && sshpid > 1)
if (errno(*__errno()) != EINTR4)
	fatal("Couldn't wait for ssh process: %s",sshfatal("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 2527
, 0, SYSLOG_LEVEL_FATAL, ((void *)0), "Couldn't wait for ssh process: %s"
, strerror((*__errno())))
	    strerror(errno))sshfatal("/usr/src/usr.bin/ssh/sftp/../sftp.c", __func__, 2527
, 0, SYSLOG_LEVEL_FATAL, ((void *)0), "Couldn't wait for ssh process: %s"
, strerror((*__errno())));

exit(err == 0 ? 0 : 1);
2530}