/usr/src/usr.sbin/bgpd/printconf.c

Bug Summary

File:	src/usr.sbin/bgpd/printconf.c
Warning:	line 1189, column 17 Use of memory allocated with size zero
Annotated Source Code

Press '?' to see keyboard shortcuts
Show analyzer invocation
clang -cc1 -cc1 -triple amd64-unknown-openbsd7.4 -analyze -disable-free -clear-ast-before-backend -disable-llvm-verifier -discard-value-names -main-file-name printconf.c -analyzer-checker=core -analyzer-checker=apiModeling -analyzer-checker=unix -analyzer-checker=deadcode -analyzer-checker=security.insecureAPI.UncheckedReturn -analyzer-checker=security.insecureAPI.getpw -analyzer-checker=security.insecureAPI.gets -analyzer-checker=security.insecureAPI.mktemp -analyzer-checker=security.insecureAPI.mkstemp -analyzer-checker=security.insecureAPI.vfork -analyzer-checker=nullability.NullPassedToNonnull -analyzer-checker=nullability.NullReturnedFromNonnull -analyzer-output plist -w -setup-static-analyzer -mrelocation-model pic -pic-level 1 -pic-is-pie -mframe-pointer=all -relaxed-aliasing -ffp-contract=on -fno-rounding-math -mconstructor-aliases -funwind-tables=2 -target-cpu x86-64 -target-feature +retpoline-indirect-calls -target-feature +retpoline-indirect-branches -tune-cpu generic -debugger-tuning=gdb -fcoverage-compilation-dir=/usr/src/usr.sbin/bgpd/obj -resource-dir /usr/local/llvm16/lib/clang/16 -I /usr/src/usr.sbin/bgpd -internal-isystem /usr/local/llvm16/lib/clang/16/include -internal-externc-isystem /usr/include -O2 -fdebug-compilation-dir=/usr/src/usr.sbin/bgpd/obj -ferror-limit 19 -fwrapv -D_RET_PROTECTOR -ret-protector -fcf-protection=branch -fno-jump-tables -fgnuc-version=4.2.1 -vectorize-loops -vectorize-slp -fno-builtin-malloc -fno-builtin-calloc -fno-builtin-realloc -fno-builtin-valloc -fno-builtin-free -fno-builtin-strdup -fno-builtin-strndup -analyzer-output=html -faddrsig -D__GCC_HAVE_DWARF2_CFI_ASM=1 -o /home/ben/Projects/scan/2024-01-11-140451-98009-1 -x c /usr/src/usr.sbin/bgpd/printconf.c
1/*	$OpenBSD: printconf.c,v 1.169 2024/01/10 13:31:09 claudio Exp $	*/

3/*
* Copyright (c) 2003, 2004 Henning Brauer <henning@openbsd.org>
* Copyright (c) 2016 Job Snijders <job@instituut.net>
* Copyright (c) 2016 Peter Hessler <phessler@openbsd.org>
*
* Permission to use, copy, modify, and distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
* copyright notice and this permission notice appear in all copies.
*
* THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
* WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
* MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
* ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
* WHATSOEVER RESULTING FROM LOSS OF USE, DATA, PROFITS OR MIND, WHETHER IN
* AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT
* OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
*/

21#include <limits.h>
22#include <stdio.h>
23#include <stdlib.h>
24#include <string.h>

26#include "bgpd.h"
27#include "session.h"
28#include "rde.h"
29#include "log.h"

31void		 print_prefix(struct filter_prefix *p);
32const char	*community_type(struct community *c);
33void		 print_community(struct community *c);
34void		 print_origin(uint8_t);
35void		 print_set(struct filter_set_head *);
36void		 print_mainconf(struct bgpd_config *);
37void		 print_l3vpn_targets(struct filter_set_head *, const char *);
38void		 print_l3vpn(struct l3vpn *);
39const char	*print_af(uint8_t);
40void		 print_network(struct network_config *, const char *);
41void		 print_flowspec(struct flowspec_config *, const char *);
42void		 print_as_sets(struct as_set_head *);
43void		 print_prefixsets(struct prefixset_head *);
44void		 print_originsets(struct prefixset_head *);
45void		 print_roa(struct roa_tree *);
46void		 print_aspa(struct aspa_tree *);
47void		 print_rtrs(struct rtr_config_head *);
48void		 print_peer(struct peer_config *, struct bgpd_config *,
    const char *);
50const char	*print_auth_alg(enum auth_alg);
51const char	*print_enc_alg(enum auth_enc_alg);
52void		 print_announce(struct peer_config *, const char *);
53void		 print_as(struct filter_rule *);
54void		 print_rule(struct bgpd_config *, struct filter_rule *);
55const char	*mrt_type(enum mrt_type);
56void		 print_mrt(struct bgpd_config *, uint32_t, uint32_t,
    const char *, const char *);
58void		 print_groups(struct bgpd_config *);
59int		 peer_compare(const void *, const void *);

61void
62print_prefix(struct filter_prefix *p)
63{
uint8_t max_len = 0;

switch (p->addr.aid) {
case AID_INET1:
case AID_VPN_IPv43:
max_len = 32;
break;
case AID_INET62:
case AID_VPN_IPv64:
max_len = 128;
break;
case AID_UNSPEC0:
/* no prefix to print */
return;
}

printf("%s/%u", log_addr(&p->addr), p->len);

switch (p->op) {
case OP_NONE:
break;
case OP_NE:
printf(" prefixlen != %u", p->len_min);
break;
case OP_XRANGE:
printf(" prefixlen %u >< %u ", p->len_min, p->len_max);
break;
case OP_RANGE:
if (p->len_min == p->len_max && p->len != p->len_min)
	printf(" prefixlen = %u", p->len_min);
else if (p->len == p->len_min && p->len_max == max_len)
	printf(" or-longer");
else if (p->len == p->len_min && p->len != p->len_max)
	printf(" maxlen %u", p->len_max);
else if (p->len_max == max_len)
	printf(" prefixlen >= %u", p->len_min);
else
	printf(" prefixlen %u - %u", p->len_min, p->len_max);
break;
default:
printf(" prefixlen %u ??? %u", p->len_min, p->len_max);
break;
}
107}

109const char *
110community_type(struct community *c)
111{
switch ((uint8_t)c->flags) {
case COMMUNITY_TYPE_BASIC8:
return "community";
case COMMUNITY_TYPE_LARGE32:
return "large-community";
case COMMUNITY_TYPE_EXT16:
return "ext-community";
default:
return "???";
}
122}

124void
125print_community(struct community *c)
126{
struct in_addr addr;
int type;
uint8_t subtype;

switch ((uint8_t)c->flags) {
case COMMUNITY_TYPE_BASIC8:
switch ((c->flags >> 8) & 0xff) {
case COMMUNITY_ANY1:
	printf("*:");
	break;
case COMMUNITY_NEIGHBOR_AS2:
	printf("neighbor-as:");
	break;
case COMMUNITY_LOCAL_AS3:
	printf("local-as:");
	break;
default:
	printf("%u:", c->data1);
	break;
}
switch ((c->flags >> 16) & 0xff) {
case COMMUNITY_ANY1:
	printf("* ");
	break;
case COMMUNITY_NEIGHBOR_AS2:
	printf("neighbor-as ");
	break;
case COMMUNITY_LOCAL_AS3:
	printf("local-as ");
	break;
default:
	printf("%u ", c->data2);
	break;
}
break;
case COMMUNITY_TYPE_LARGE32:
switch ((c->flags >> 8) & 0xff) {
case COMMUNITY_ANY1:
	printf("*:");
	break;
case COMMUNITY_NEIGHBOR_AS2:
	printf("neighbor-as:");
	break;
case COMMUNITY_LOCAL_AS3:
	printf("local-as:");
	break;
default:
	printf("%u:", c->data1);
	break;
}
switch ((c->flags >> 16) & 0xff) {
case COMMUNITY_ANY1:
	printf("*:");
	break;
case COMMUNITY_NEIGHBOR_AS2:
	printf("neighbor-as:");
	break;
case COMMUNITY_LOCAL_AS3:
	printf("local-as:");
	break;
default:
	printf("%u:", c->data2);
	break;
}
switch ((c->flags >> 24) & 0xff) {
case COMMUNITY_ANY1:
	printf("* ");
	break;
case COMMUNITY_NEIGHBOR_AS2:
	printf("neighbor-as ");
	break;
case COMMUNITY_LOCAL_AS3:
	printf("local-as ");
	break;
default:
	printf("%u ", c->data3);
	break;
}
break;
case COMMUNITY_TYPE_EXT16:
if ((c->flags >> 24 & 0xff) == COMMUNITY_ANY1) {
	printf("* * ");
	break;
}
type = (int32_t)c->data3 >> 8;
subtype = c->data3;
printf("%s ", log_ext_subtype(type, subtype));
if ((c->flags >> 8 & 0xff) == COMMUNITY_ANY1) {
	printf("* ");
	break;
}

switch (type) {
case EXT_COMMUNITY_TRANS_TWO_AS0x00:
case EXT_COMMUNITY_TRANS_FOUR_AS0x02:
case EXT_COMMUNITY_GEN_TWO_AS0x80:
case EXT_COMMUNITY_GEN_FOUR_AS0x82:
	if ((c->flags >> 8 & 0xff) == COMMUNITY_NEIGHBOR_AS2)
		printf("neighbor-as:");
	else if ((c->flags >> 8 & 0xff) == COMMUNITY_LOCAL_AS3)
		printf("local-as:");
	else
		printf("%s:", log_as(c->data1));
	break;
case EXT_COMMUNITY_TRANS_IPV40x01:
case EXT_COMMUNITY_GEN_IPV40x81:
	addr.s_addr = htonl(c->data1)(__uint32_t)(__builtin_constant_p(c->data1) ? (__uint32_t)
(((__uint32_t)(c->data1) & 0xff) << 24 | ((__uint32_t
)(c->data1) & 0xff00) << 8 | ((__uint32_t)(c->
data1) & 0xff0000) >> 8 | ((__uint32_t)(c->data1
) & 0xff000000) >> 24) : __swap32md(c->data1));
	printf("%s:", inet_ntoa(addr));
	break;
}

switch (type) {
case EXT_COMMUNITY_TRANS_TWO_AS0x00:
case EXT_COMMUNITY_TRANS_FOUR_AS0x02:
case EXT_COMMUNITY_TRANS_IPV40x01:
case EXT_COMMUNITY_GEN_TWO_AS0x80:
case EXT_COMMUNITY_GEN_FOUR_AS0x82:
case EXT_COMMUNITY_GEN_IPV40x81:
	if ((c->flags >> 16 & 0xff) == COMMUNITY_ANY1)
		printf("* ");
	else if ((c->flags >> 16 & 0xff) ==
	    COMMUNITY_NEIGHBOR_AS2)
		printf("neighbor-as ");
	else if ((c->flags >> 16 & 0xff) == COMMUNITY_LOCAL_AS3)
		printf("local-as ");
	else
		printf("%u ", c->data2);
	break;
case EXT_COMMUNITY_NON_TRANS_OPAQUE0x43:
	if (subtype == EXT_COMMUNITY_SUBTYPE_OVS0) {
		switch (c->data2) {
		case EXT_COMMUNITY_OVS_VALID0:
			printf("valid ");
			break;
		case EXT_COMMUNITY_OVS_NOTFOUND1:
			printf("not-found ");
			break;
		case EXT_COMMUNITY_OVS_INVALID2:
			printf("invalid ");
			break;
		}
		break;
	}
	printf("0x%x%08x ", c->data1 & 0xffff, c->data2);
	break;
case EXT_COMMUNITY_TRANS_OPAQUE0x03:
case EXT_COMMUNITY_TRANS_EVPN0x06:
default:
	printf("0x%x%08x ", c->data1 & 0xffff, c->data2);
	break;
}
}
279}

281void
282print_origin(uint8_t o)
283{
if (o == ORIGIN_IGP0)
printf("igp ");
else if (o == ORIGIN_EGP1)
printf("egp ");
else if (o == ORIGIN_INCOMPLETE2)
printf("incomplete ");
else
printf("%u ", o);
292}

294void
295print_set(struct filter_set_head *set)
296{
struct filter_set	*s;

if (TAILQ_EMPTY(set)(((set)->tqh_first) == ((void *)0)))
return;

printf("set { ");
TAILQ_FOREACH(s, set, entry)for((s) = ((set)->tqh_first); (s) != ((void *)0); (s) = ((
s)->entry.tqe_next)) {
switch (s->type) {
case ACTION_SET_LOCALPREF:
	printf("localpref %u ", s->action.metric);
	break;
case ACTION_SET_RELATIVE_LOCALPREF:
	printf("localpref %+d ", s->action.relative);
	break;
case ACTION_SET_MED:
	printf("metric %u ", s->action.metric);
	break;
case ACTION_SET_RELATIVE_MED:
	printf("metric %+d ", s->action.relative);
	break;
case ACTION_SET_WEIGHT:
	printf("weight %u ", s->action.metric);
	break;
case ACTION_SET_RELATIVE_WEIGHT:
	printf("weight %+d ", s->action.relative);
	break;
case ACTION_SET_NEXTHOP:
	printf("nexthop %s ", log_addr(&s->action.nexthop));
	break;
case ACTION_SET_NEXTHOP_REJECT:
	printf("nexthop reject ");
	break;
case ACTION_SET_NEXTHOP_BLACKHOLE:
	printf("nexthop blackhole ");
	break;
case ACTION_SET_NEXTHOP_NOMODIFY:
	printf("nexthop no-modify ");
	break;
case ACTION_SET_NEXTHOP_SELF:
	printf("nexthop self ");
	break;
case ACTION_SET_PREPEND_SELF:
	printf("prepend-self %u ", s->action.prepend);
	break;
case ACTION_SET_PREPEND_PEER:
	printf("prepend-neighbor %u ", s->action.prepend);
	break;
case ACTION_SET_AS_OVERRIDE:
	printf("as-override ");
	break;
case ACTION_DEL_COMMUNITY:
	printf("%s delete ",
	    community_type(&s->action.community));
	print_community(&s->action.community);
	break;
case ACTION_SET_COMMUNITY:
	printf("%s ", community_type(&s->action.community));
	print_community(&s->action.community);
	break;
case ACTION_PFTABLE:
	printf("pftable %s ", s->action.pftable);
	break;
case ACTION_RTLABEL:
	printf("rtlabel %s ", s->action.rtlabel);
	break;
case ACTION_SET_ORIGIN:
	printf("origin ");
	print_origin(s->action.origin);
	break;
case ACTION_RTLABEL_ID:
case ACTION_PFTABLE_ID:
case ACTION_SET_NEXTHOP_REF:
	/* not possible */
	printf("king bula saiz: config broken");
	break;
}
}
printf("}");
375}

377void
378print_mainconf(struct bgpd_config *conf)
379{
struct in_addr		 ina;
struct listen_addr	*la;

printf("AS %s", log_as(conf->as));
if (conf->as > USHRT_MAX0xffff && conf->short_as != AS_TRANS23456)
printf(" %u", conf->short_as);
ina.s_addr = conf->bgpid;
printf("\nrouter-id %s\n", inet_ntoa(ina));

printf("socket \"%s\"\n", conf->csock);
if (conf->rcsock)
printf("socket \"%s\" restricted\n", conf->rcsock);
if (conf->holdtime != INTERVAL_HOLD90)
printf("holdtime %u\n", conf->holdtime);
if (conf->min_holdtime != MIN_HOLDTIME3)
printf("holdtime min %u\n", conf->min_holdtime);
if (conf->connectretry != INTERVAL_CONNECTRETRY120)
printf("connect-retry %u\n", conf->connectretry);

if (conf->flags & BGPD_FLAG_DECISION_ROUTEAGE0x0100)
printf("rde route-age evaluate\n");
if (conf->flags & BGPD_FLAG_DECISION_MED_ALWAYS0x0400)
printf("rde med compare always\n");
if (conf->flags & BGPD_FLAG_DECISION_ALL_PATHS0x0800)
printf("rde evaluate all\n");

if (conf->flags & BGPD_FLAG_NO_AS_SET0x1000)
printf("reject as-set yes\n");

if (conf->log & BGPD_LOG_UPDATES0x0001)
printf("log updates\n");

TAILQ_FOREACH(la, conf->listen_addrs, entry)for((la) = ((conf->listen_addrs)->tqh_first); (la) != (
(void *)0); (la) = ((la)->entry.tqe_next)) {
struct bgpd_addr addr;
uint16_t port;

sa2addr((struct sockaddr *)&la->sa, &addr, &port);
printf("listen on %s",
    log_sockaddr((struct sockaddr *)&la->sa, la->sa_len));
if (port != BGP_PORT179)
	printf(" port %hu", port);
printf("\n");
}

if (conf->flags & BGPD_FLAG_NEXTHOP_BGP0x0010)
printf("nexthop qualify via bgp\n");
if (conf->flags & BGPD_FLAG_NEXTHOP_DEFAULT0x0020)
printf("nexthop qualify via default\n");
if (conf->fib_priority != kr_default_prio())
printf("fib-priority %hhu\n", conf->fib_priority);
printf("\n");
431}

433void
434print_l3vpn_targets(struct filter_set_head *set, const char *tgt)
435{
struct filter_set	*s;
TAILQ_FOREACH(s, set, entry)for((s) = ((set)->tqh_first); (s) != ((void *)0); (s) = ((
s)->entry.tqe_next)) {
printf("\t%s ", tgt);
print_community(&s->action.community);
printf("\n");
}
442}

444void
445print_l3vpn(struct l3vpn *vpn)
446{
struct network *n;

printf("vpn \"%s\" on %s {\n", vpn->descr, vpn->ifmpe);
printf("\t%s\n", log_rd(vpn->rd));

print_l3vpn_targets(&vpn->export, "export-target");
print_l3vpn_targets(&vpn->import, "import-target");

if (vpn->flags & F_RIB_NOFIBSYNC0x0008)
printf("\tfib-update no\n");
else
printf("\tfib-update yes\n");

TAILQ_FOREACH(n, &vpn->net_l, entry)for((n) = ((&vpn->net_l)->tqh_first); (n) != ((void
 *)0); (n) = ((n)->entry.tqe_next))
print_network(&n->net, "\t");

printf("}\n");
464}

466const char *
467print_af(uint8_t aid)
468{
/*
* Hack around the fact that aid2str() will return "IPv4 unicast"
* for AID_INET. AID_INET, AID_INET6 and the flowspec AID need
* special handling and the other AID should never end up here.
*/
if (aid == AID_INET1 || aid == AID_FLOWSPECv45)
return ("inet");
if (aid == AID_INET62 || aid == AID_FLOWSPECv66)
return ("inet6");
return (aid2str(aid));
479}

481void
482print_network(struct network_config *n, const char *c)
483{
switch (n->type) {
case NETWORK_STATIC:
printf("%snetwork %s static", c, print_af(n->prefix.aid));
break;
case NETWORK_CONNECTED:
printf("%snetwork %s connected", c, print_af(n->prefix.aid));
break;
case NETWORK_RTLABEL:
printf("%snetwork %s rtlabel \"%s\"", c,
    print_af(n->prefix.aid), rtlabel_id2name(n->rtlabel));
break;
case NETWORK_PRIORITY:
printf("%snetwork %s priority %d", c,
    print_af(n->prefix.aid), n->priority);
break;
case NETWORK_PREFIXSET:
printf("%snetwork prefix-set %s", c, n->psname);
break;
default:
printf("%snetwork %s/%u", c, log_addr(&n->prefix),
    n->prefixlen);
break;
}
if (!TAILQ_EMPTY(&n->attrset)(((&n->attrset)->tqh_first) == ((void *)0)))
printf(" ");
print_set(&n->attrset);
printf("\n");
511}

513static void
514print_flowspec_list(struct flowspec *f, int type, int is_v6)
515{
const uint8_t *comp;
const char *fmt;
int complen, off = 0;

if (flowspec_get_component(f->data, f->len, type, is_v6,
   &comp, &complen) != 1)
return;

printf("%s ", flowspec_fmt_label(type));
fmt = flowspec_fmt_num_op(comp, complen, &off);
if (off == -1) {
printf("%s ", fmt);
} else {
printf("{ %s ", fmt);
do {
	fmt = flowspec_fmt_num_op(comp, complen, &off);
	printf("%s ", fmt);
} while (off != -1);
printf("} ");
}
536}

538static void
539print_flowspec_flags(struct flowspec *f, int type, int is_v6)
540{
const uint8_t *comp;
const char *fmt, *flags;
int complen, off = 0;

switch (type) {
case FLOWSPEC_TYPE_TCP_FLAGS9:
flags = FLOWSPEC_TCP_FLAG_STRING"FSRPAUEW";
break;
case FLOWSPEC_TYPE_FRAG12:
if (!is_v6)
	flags = FLOWSPEC_FRAG_STRING4"DIFL";
else
	flags = FLOWSPEC_FRAG_STRING6" IFL";
break;
default:
printf("??? ");
return;
}

if (flowspec_get_component(f->data, f->len, type, is_v6,
   &comp, &complen) != 1)
return;

printf("%s ", flowspec_fmt_label(type));

fmt = flowspec_fmt_bin_op(comp, complen, &off, flags);
if (off == -1) {
printf("%s ", fmt);
} else {
printf("{ %s ", fmt);
do {
	fmt = flowspec_fmt_bin_op(comp, complen, &off, flags);
	printf("%s ", fmt);
} while (off != -1);
printf("} ");
}
577}

579static void
580print_flowspec_addr(struct flowspec *f, int type, int is_v6)
581{
struct bgpd_addr addr;
uint8_t plen;

flowspec_get_addr(f->data, f->len, type, is_v6, &addr, &plen, NULL((void *)0));
if (plen == 0)
printf("%s any ", flowspec_fmt_label(type));
else
printf("%s %s/%u ", flowspec_fmt_label(type),
    log_addr(&addr), plen);
591}

593void
594print_flowspec(struct flowspec_config *fconf, const char *c)
595{
struct flowspec *f = fconf->flow;
int is_v6 = (f->aid == AID_FLOWSPECv66);

printf("%sflowspec %s ", c, print_af(f->aid));

print_flowspec_list(f, FLOWSPEC_TYPE_PROTO3, is_v6);

print_flowspec_addr(f, FLOWSPEC_TYPE_SOURCE2, is_v6);
print_flowspec_list(f, FLOWSPEC_TYPE_SRC_PORT6, is_v6);

print_flowspec_addr(f, FLOWSPEC_TYPE_DEST1, is_v6);
print_flowspec_list(f, FLOWSPEC_TYPE_DST_PORT5, is_v6);

print_flowspec_list(f, FLOWSPEC_TYPE_DSCP11, is_v6);
print_flowspec_list(f, FLOWSPEC_TYPE_PKT_LEN10, is_v6);
print_flowspec_flags(f, FLOWSPEC_TYPE_TCP_FLAGS9, is_v6);
print_flowspec_flags(f, FLOWSPEC_TYPE_FRAG12, is_v6);

/* TODO: fixup the code handling to be like in the parser */
print_flowspec_list(f, FLOWSPEC_TYPE_ICMP_TYPE7, is_v6);
print_flowspec_list(f, FLOWSPEC_TYPE_ICMP_CODE8, is_v6);

print_set(&fconf->attrset);
printf("\n");
620}

622void
623print_as_sets(struct as_set_head *as_sets)
624{
struct as_set *aset;
uint32_t *as;
size_t i, n;
int len;

SIMPLEQ_FOREACH(aset, as_sets, entry)for((aset) = ((as_sets)->sqh_first); (aset) != ((void *)0)
; (aset) = ((aset)->entry.sqe_next)) {
printf("as-set \"%s\" {\n\t", aset->name);
as = set_get(aset->set, &n);
for (i = 0, len = 8; i < n; i++) {
	if (len > 72) {
		printf("\n\t");
		len = 8;
	}
	len += printf("%u ", as[i]);
}
printf("\n}\n\n");
}
642}

644void
645print_prefixsets(struct prefixset_head *psh)
646{
struct prefixset	*ps;
struct prefixset_item	*psi;

SIMPLEQ_FOREACH(ps, psh, entry)for((ps) = ((psh)->sqh_first); (ps) != ((void *)0); (ps) =
 ((ps)->entry.sqe_next)) {
int count = 0;
printf("prefix-set \"%s\" {", ps->name);
RB_FOREACH(psi, prefixset_tree, &ps->psitems)for ((psi) = prefixset_tree_RB_MINMAX(&ps->psitems, -1
); (psi) != ((void *)0); (psi) = prefixset_tree_RB_NEXT(psi)) {
	if (count++ % 2 == 0)
		printf("\n\t");
	else
		printf(", ");
	print_prefix(&psi->p);
}
printf("\n}\n\n");
}
662}

664void
665print_originsets(struct prefixset_head *psh)
666{
struct prefixset	*ps;
struct roa		*roa;
struct bgpd_addr	 addr;

SIMPLEQ_FOREACH(ps, psh, entry)for((ps) = ((psh)->sqh_first); (ps) != ((void *)0); (ps) =
 ((ps)->entry.sqe_next)) {
printf("origin-set \"%s\" {", ps->name);
RB_FOREACH(roa, roa_tree, &ps->roaitems)for ((roa) = roa_tree_RB_MINMAX(&ps->roaitems, -1); (roa
) != ((void *)0); (roa) = roa_tree_RB_NEXT(roa)) {
	printf("\n\t");
	addr.aid = roa->aid;
	addr.v6ba.v6 = roa->prefix.inet6;
	printf("%s/%u", log_addr(&addr), roa->prefixlen);
	if (roa->prefixlen != roa->maxlen)
		printf(" maxlen %u", roa->maxlen);
	printf(" source-as %u", roa->asnum);
}
printf("\n}\n\n");
}
684}

686void
687print_roa(struct roa_tree *r)
688{
struct roa	*roa;

if (RB_EMPTY(r)((r)->rbh_root == ((void *)0)))
return;

printf("roa-set {");
RB_FOREACH(roa, roa_tree, r)for ((roa) = roa_tree_RB_MINMAX(r, -1); (roa) != ((void *)0);
 (roa) = roa_tree_RB_NEXT(roa)) {
printf("\n\t%s", log_roa(roa));
}
printf("\n}\n\n");
699}

701void
702print_aspa(struct aspa_tree *a)
703{
struct aspa_set	*aspa;

if (RB_EMPTY(a)((a)->rbh_root == ((void *)0)))
return;

printf("aspa-set {");
RB_FOREACH(aspa, aspa_tree, a)for ((aspa) = aspa_tree_RB_MINMAX(a, -1); (aspa) != ((void *)
0); (aspa) = aspa_tree_RB_NEXT(aspa)) {
printf("\n\t%s", log_aspa(aspa));
}
printf("\n}\n\n");
714}

716void
717print_rtrs(struct rtr_config_head *rh)
718{
struct rtr_config *r;

SIMPLEQ_FOREACH(r, rh, entry)for((r) = ((rh)->sqh_first); (r) != ((void *)0); (r) = ((r
)->entry.sqe_next)) {
printf("rtr %s {\n", log_addr(&r->remote_addr));
printf("\tdescr \"%s\"\n", r->descr);
printf("\tport %u\n", r->remote_port);
if (r->local_addr.aid != AID_UNSPEC0)
	printf("local-addr %s\n", log_addr(&r->local_addr));
printf("}\n\n");
}
729}

731void
732print_peer(struct peer_config *p, struct bgpd_config *conf, const char *c)
733{
char		*method;
struct in_addr	 ina;

if ((p->remote_addr.aid == AID_INET1 && p->remote_masklen != 32) ||
   (p->remote_addr.aid == AID_INET62 && p->remote_masklen != 128))
printf("%sneighbor %s/%u {\n", c, log_addr(&p->remote_addr),
    p->remote_masklen);
else
printf("%sneighbor %s {\n", c, log_addr(&p->remote_addr));
if (p->descr[0])
printf("%s\tdescr \"%s\"\n", c, p->descr);
if (p->rib[0])
printf("%s\trib \"%s\"\n", c, p->rib);
if (p->remote_as)
printf("%s\tremote-as %s\n", c, log_as(p->remote_as));
if (p->local_as != conf->as) {
printf("%s\tlocal-as %s", c, log_as(p->local_as));
if (p->local_as > USHRT_MAX0xffff && p->local_short_as != AS_TRANS23456)
	printf(" %u", p->local_short_as);
printf("\n");
}
if (p->down)
printf("%s\tdown\n", c);
if (p->distance > 1)
printf("%s\tmultihop %u\n", c, p->distance);
if (p->passive)
printf("%s\tpassive\n", c);
if (p->local_addr_v4.aid)
printf("%s\tlocal-address %s\n", c,
    log_addr(&p->local_addr_v4));
if (p->local_addr_v6.aid)
printf("%s\tlocal-address %s\n", c,
    log_addr(&p->local_addr_v6));
if (p->remote_port != BGP_PORT179)
printf("%s\tport %hu\n", c, p->remote_port);
if (p->role != ROLE_NONE)
printf("%s\trole %s\n", c, log_policy(p->role));
if (p->max_prefix) {
printf("%s\tmax-prefix %u", c, p->max_prefix);
if (p->max_prefix_restart)
	printf(" restart %u", p->max_prefix_restart);
printf("\n");
}
if (p->max_out_prefix) {
printf("%s\tmax-prefix %u out", c, p->max_out_prefix);
if (p->max_out_prefix_restart)
	printf(" restart %u", p->max_out_prefix_restart);
printf("\n");
}
if (p->holdtime)
printf("%s\tholdtime %u\n", c, p->holdtime);
if (p->min_holdtime)
printf("%s\tholdtime min %u\n", c, p->min_holdtime);
if (p->export_type == EXPORT_NONE)
printf("%s\texport none\n", c);
else if (p->export_type == EXPORT_DEFAULT_ROUTE)
printf("%s\texport default-route\n", c);
if (p->enforce_as == ENFORCE_AS_ON)
printf("%s\tenforce neighbor-as yes\n", c);
else
printf("%s\tenforce neighbor-as no\n", c);
if (p->enforce_local_as == ENFORCE_AS_ON)
printf("%s\tenforce local-as yes\n", c);
else
printf("%s\tenforce local-as no\n", c);
if (p->reflector_client) {
if (conf->clusterid == 0)
	printf("%s\troute-reflector\n", c);
else {
	ina.s_addr = conf->clusterid;
	printf("%s\troute-reflector %s\n", c,
	    inet_ntoa(ina));
}
}
if (p->demote_group[0])
printf("%s\tdemote %s\n", c, p->demote_group);
if (p->if_depend[0])
printf("%s\tdepend on \"%s\"\n", c, p->if_depend);
if (p->flags & PEERFLAG_TRANS_AS0x01)
printf("%s\ttransparent-as yes\n", c);

if (conf->flags & BGPD_FLAG_DECISION_ALL_PATHS0x0800) {
if (!(p->flags & PEERFLAG_EVALUATE_ALL0x04))
	printf("%s\trde evaluate default\n", c);
} else {
if (p->flags & PEERFLAG_EVALUATE_ALL0x04)
	printf("%s\trde evaluate all\n", c);
}

if (conf->flags & BGPD_FLAG_NO_AS_SET0x1000) {
if (!(p->flags & PEERFLAG_NO_AS_SET0x08))
	printf("%s\treject as-set no\n", c);
} else {
if (p->flags & PEERFLAG_NO_AS_SET0x08)
	printf("%s\treject as-set yes\n", c);
}

if (p->flags & PEERFLAG_LOG_UPDATES0x02)
printf("%s\tlog updates\n", c);

if (p->auth.method == AUTH_MD5SIG)
printf("%s\ttcp md5sig\n", c);
else if (p->auth.method == AUTH_IPSEC_MANUAL_ESP ||
   p->auth.method == AUTH_IPSEC_MANUAL_AH) {
if (p->auth.method == AUTH_IPSEC_MANUAL_ESP)
	method = "esp";
else
	method = "ah";

printf("%s\tipsec %s in spi %u %s XXXXXX", c, method,
    p->auth.spi_in, print_auth_alg(p->auth.auth_alg_in));
if (p->auth.enc_alg_in)
	printf(" %s XXXXXX", print_enc_alg(p->auth.enc_alg_in));
printf("\n");

printf("%s\tipsec %s out spi %u %s XXXXXX", c, method,
    p->auth.spi_out, print_auth_alg(p->auth.auth_alg_out));
if (p->auth.enc_alg_out)
	printf(" %s XXXXXX",
	    print_enc_alg(p->auth.enc_alg_out));
printf("\n");
} else if (p->auth.method == AUTH_IPSEC_IKE_AH)
printf("%s\tipsec ah ike\n", c);
else if (p->auth.method == AUTH_IPSEC_IKE_ESP)
printf("%s\tipsec esp ike\n", c);

if (p->ttlsec)
printf("%s\tttl-security yes\n", c);

print_announce(p, c);

print_mrt(conf, p->id, p->groupid, c, "\t");

printf("%s}\n", c);
868}

870const char *
871print_auth_alg(enum auth_alg alg)
872{
switch (alg) {
case AUTH_AALG_SHA1HMAC:
return ("sha1");
case AUTH_AALG_MD5HMAC:
return ("md5");
default:
return ("???");
}
881}

883const char *
884print_enc_alg(enum auth_enc_alg alg)
885{
switch (alg) {
case AUTH_EALG_3DESCBC:
return ("3des");
case AUTH_EALG_AES:
return ("aes");
default:
return ("???");
}
894}

896static const char *
897print_addpath_mode(enum addpath_mode mode)
898{
switch (mode) {
case ADDPATH_EVAL_NONE:
return "none";
case ADDPATH_EVAL_BEST:
return "best";
case ADDPATH_EVAL_ECMP:
return "ecmp";
case ADDPATH_EVAL_AS_WIDE:
return "as-wide-best";
case ADDPATH_EVAL_ALL:
return "all";
default:
return "???";
}
913}

915void
916print_announce(struct peer_config *p, const char *c)
917{
uint8_t	aid;

if (p->announce_capa == 0)
printf("%s\tannounce capabilities no\n", c);

for (aid = 0; aid < AID_MAX7; aid++)
if (p->capabilities.mp[aid])
	printf("%s\tannounce %s\n", c, aid2str(aid));

if (p->capabilities.refresh == 0)
printf("%s\tannounce refresh no\n", c);
if (p->capabilities.enhanced_rr == 1)
printf("%s\tannounce enhanced refresh yes\n", c);
if (p->capabilities.grestart.restart == 0)
printf("%s\tannounce restart no\n", c);
if (p->capabilities.as4byte == 0)
printf("%s\tannounce as4byte no\n", c);
if (p->capabilities.add_path[0] & CAPA_AP_RECV0x01)
printf("%s\tannounce add-path recv yes\n", c);
if (p->capabilities.add_path[0] & CAPA_AP_SEND0x02) {
printf("%s\tannounce add-path send %s", c,
    print_addpath_mode(p->eval.mode));
if (p->eval.extrapaths != 0)
	printf(" plus %d", p->eval.extrapaths);
if (p->eval.maxpaths != 0)
	printf(" max %d", p->eval.maxpaths);
printf("\n");
}
if (p->capabilities.policy) {
printf("%s\tannounce policy %s\n", c,
    p->capabilities.policy == 2 ? "enforce" : "yes");
}
950}

952void
953print_as(struct filter_rule *r)
954{
if (r->match.as.flags & AS_FLAG_AS_SET_NAME0x02) {
printf("as-set \"%s\" ", r->match.as.name);
return;
}
switch (r->match.as.op) {
case OP_RANGE:
printf("%s - ", log_as(r->match.as.as_min));
printf("%s ", log_as(r->match.as.as_max));
break;
case OP_XRANGE:
printf("%s >< ", log_as(r->match.as.as_min));
printf("%s ", log_as(r->match.as.as_max));
break;
case OP_NE:
printf("!= %s ", log_as(r->match.as.as_min));
break;
default:
printf("%s ", log_as(r->match.as.as_min));
break;
}
975}

977void
978print_rule(struct bgpd_config *conf, struct filter_rule *r)
979{
struct peer *p;
int i;

if (r->action == ACTION_ALLOW)
printf("allow ");
else if (r->action == ACTION_DENY)
printf("deny ");
else
printf("match ");
if (r->quick)
printf("quick ");

if (r->rib[0])
printf("rib %s ", r->rib);

if (r->dir == DIR_IN)
printf("from ");
else if (r->dir == DIR_OUT)
printf("to ");
else
printf("eeeeeeeps. ");

if (r->peer.peerid) {
RB_FOREACH(p, peer_head, &conf->peers)for ((p) = peer_head_RB_MINMAX(&conf->peers, -1); (p) !=
 ((void *)0); (p) = peer_head_RB_NEXT(p))
	if (p->conf.id == r->peer.peerid)
		break;
if (p == NULL((void *)0))
	printf("? ");
else
	printf("%s ", log_addr(&p->conf.remote_addr));
} else if (r->peer.groupid) {
RB_FOREACH(p, peer_head, &conf->peers)for ((p) = peer_head_RB_MINMAX(&conf->peers, -1); (p) !=
 ((void *)0); (p) = peer_head_RB_NEXT(p))
	if (p->conf.groupid == r->peer.groupid)
		break;
if (p == NULL((void *)0))
	printf("group ? ");
else
	printf("group \"%s\" ", p->conf.group);
} else if (r->peer.remote_as) {
printf("AS %s ", log_as(r->peer.remote_as));
} else if (r->peer.ebgp) {
printf("ebgp ");
} else if (r->peer.ibgp) {
printf("ibgp ");
} else
printf("any ");

if (r->match.ovs.is_set) {
switch (r->match.ovs.validity) {
case ROA_VALID0x2:
	printf("ovs valid ");
	break;
case ROA_INVALID0x1:
	printf("ovs invalid ");
	break;
case ROA_NOTFOUND0x0:
	printf("ovs not-found ");
	break;
default:
	printf("ovs ??? %d ??? ", r->match.ovs.validity);
}
}

if (r->match.avs.is_set) {
switch (r->match.avs.validity) {
case ASPA_VALID0x02:
	printf("avs valid ");
	break;
case ASPA_INVALID0x01:
	printf("avs invalid ");
	break;
case ASPA_UNKNOWN0x00:
	printf("avs unknown ");
	break;
default:
	printf("avs ??? %d ??? ", r->match.avs.validity);
}
}

if (r->match.prefix.addr.aid != AID_UNSPEC0) {
printf("prefix ");
print_prefix(&r->match.prefix);
printf(" ");
}

if (r->match.prefixset.name[0] != '\0')
printf("prefix-set \"%s\" ", r->match.prefixset.name);
if (r->match.prefixset.flags & PREFIXSET_FLAG_LONGER0x08)
printf("or-longer ");

if (r->match.originset.name[0] != '\0')
printf("origin-set \"%s\" ", r->match.originset.name);

if (r->match.nexthop.flags) {
if (r->match.nexthop.flags == FILTER_NEXTHOP_NEIGHBOR2)
	printf("nexthop neighbor ");
else
	printf("nexthop %s ", log_addr(&r->match.nexthop.addr));
}

if (r->match.as.type) {
if (r->match.as.type == AS_ALL)
	printf("AS ");
else if (r->match.as.type == AS_SOURCE)
	printf("source-as ");
else if (r->match.as.type == AS_TRANSIT)
	printf("transit-as ");
else if (r->match.as.type == AS_PEER)
	printf("peer-as ");
else
	printf("unfluffy-as ");
print_as(r);
}

if (r->match.aslen.type) {
printf("%s %u ", r->match.aslen.type == ASLEN_MAX ?
    "max-as-len" : "max-as-seq", r->match.aslen.aslen);
}

for (i = 0; i < MAX_COMM_MATCH3; i++) {
struct community *c = &r->match.community[i];
if (c->flags != 0) {
	printf("%s ", community_type(c));
	print_community(c);
}
}

if (r->match.maxcomm != 0)
printf("max-communities %d ", r->match.maxcomm - 1);
if (r->match.maxextcomm != 0)
printf("max-ext-communities %d ", r->match.maxextcomm - 1);
if (r->match.maxlargecomm != 0)
printf("max-large-communities %d ", r->match.maxlargecomm - 1);

print_set(&r->set);

printf("\n");
1117}

1119const char *
1120mrt_type(enum mrt_type t)
1121{
switch (t) {
case MRT_NONE:
break;
case MRT_TABLE_DUMP:
return "table";
case MRT_TABLE_DUMP_MP:
return "table-mp";
case MRT_TABLE_DUMP_V2:
return "table-v2";
case MRT_ALL_IN:
return "all in";
case MRT_ALL_OUT:
return "all out";
case MRT_UPDATE_IN:
return "updates in";
case MRT_UPDATE_OUT:
return "updates out";
}
return "unfluffy MRT";
1141}

1143void
1144print_mrt(struct bgpd_config *conf, uint32_t pid, uint32_t gid,
  const char *prep, const char *prep2)
1146{
struct mrt	*m;

if (conf->mrt == NULL((void *)0))
return;

LIST_FOREACH(m, conf->mrt, entry)for((m) = ((conf->mrt)->lh_first); (m)!= ((void *)0); (
m) = ((m)->entry.le_next))
if ((gid != 0 && m->group_id == gid) ||
    (m->peer_id == pid && m->group_id == gid)) {
	printf("%s%sdump ", prep, prep2);
	if (m->rib[0])
		printf("rib %s ", m->rib);
	printf("%s \"%s\"", mrt_type(m->type),
	    MRT2MC(m)((struct mrt_config *)(m))->name);
	if (MRT2MC(m)((struct mrt_config *)(m))->ReopenTimerInterval == 0)
		printf("\n");
	else
		printf(" %d\n", MRT2MC(m)((struct mrt_config *)(m))->ReopenTimerInterval);
}
if (!LIST_EMPTY(conf->mrt)(((conf->mrt)->lh_first) == ((void *)0)))
printf("\n");
1167}

1169void
1170print_groups(struct bgpd_config *conf)
1171{
struct peer_config	**peerlist;
struct peer		 *p;
u_int			  peer_cnt, i;
uint32_t		  prev_groupid;
const char		 *tab	= "\t";
const char		 *nada	= "";
const char		 *c;

peer_cnt = 0;
RB_FOREACH(p, peer_head, &conf->peers)for ((p) = peer_head_RB_MINMAX(&conf->peers, -1); (p) !=
 ((void *)0); (p) = peer_head_RB_NEXT(p))
13
←
Assuming 'p' is equal to null→
14
←
Loop condition is false. Execution continues on line 1184→
peer_cnt++;

if ((peerlist = calloc(peer_cnt, sizeof(struct peer_config *))) == NULL((void *)0))
15
←
Memory is allocated→
16
←
Assuming the condition is false→
17
←
Taking false branch→
fatal("print_groups calloc");

i = 0;
RB_FOREACH(p, peer_head, &conf->peers)for ((p) = peer_head_RB_MINMAX(&conf->peers, -1); (p) !=
 ((void *)0); (p) = peer_head_RB_NEXT(p))
18
←
Assuming 'p' is not equal to null→
19
←
Loop condition is true.  Entering loop body→
peerlist[i++] = &p->conf;
20
←
Use of memory allocated with size zero

qsort(peerlist, peer_cnt, sizeof(struct peer_config *), peer_compare);

prev_groupid = 0;
for (i = 0; i < peer_cnt; i++) {
if (peerlist[i]->groupid) {
	c = tab;
	if (peerlist[i]->groupid != prev_groupid) {
		if (prev_groupid)
			printf("}\n\n");
		printf("group \"%s\" {\n", peerlist[i]->group);
		prev_groupid = peerlist[i]->groupid;
	}
} else
	c = nada;

print_peer(peerlist[i], conf, c);
}

if (prev_groupid)
printf("}\n\n");

free(peerlist);
1213}

1215int
1216peer_compare(const void *aa, const void *bb)
1217{
const struct peer_config * const *a;
const struct peer_config * const *b;

a = aa;
b = bb;

return ((*a)->groupid - (*b)->groupid);
1225}

1227void
1228print_config(struct bgpd_config *conf, struct rib_names *rib_l)
1229{
struct filter_rule	*r;
struct network		*n;
struct flowspec_config	*f;
struct rde_rib		*rr;
struct l3vpn		*vpn;

print_mainconf(conf);
print_rtrs(&conf->rtrs);
print_roa(&conf->roa);
print_aspa(&conf->aspa);
print_as_sets(&conf->as_sets);
print_prefixsets(&conf->prefixsets);
print_originsets(&conf->originsets);
TAILQ_FOREACH(n, &conf->networks, entry)for((n) = ((&conf->networks)->tqh_first); (n) != ((
void *)0); (n) = ((n)->entry.tqe_next))
1
Assuming 'n' is equal to null→
2
←
Loop condition is false. Execution continues on line 1245→
print_network(&n->net, "");
RB_FOREACH(f, flowspec_tree, &conf->flowspecs)for ((f) = flowspec_tree_RB_MINMAX(&conf->flowspecs, -
1); (f) != ((void *)0); (f) = flowspec_tree_RB_NEXT(f))
3
←
Assuming 'f' is equal to null→
4
←
Loop condition is false. Execution continues on line 1247→
print_flowspec(f, "");
if (!SIMPLEQ_EMPTY(&conf->l3vpns)(((&conf->l3vpns)->sqh_first) == ((void *)0)))
5
←
Assuming field 'sqh_first' is not equal to null→
6
←
Taking true branch→
printf("\n");
SIMPLEQ_FOREACH(vpn, &conf->l3vpns, entry)for((vpn) = ((&conf->l3vpns)->sqh_first); (vpn) != (
(void *)0); (vpn) = ((vpn)->entry.sqe_next))
7
←
Loop condition is true.  Entering loop body→
8
←
Assuming 'vpn' is equal to null→
9
←
Loop condition is false. Execution continues on line 1251→
print_l3vpn(vpn);
printf("\n");
SIMPLEQ_FOREACH(rr, rib_l, entry)for((rr) = ((rib_l)->sqh_first); (rr) != ((void *)0); (rr)
 = ((rr)->entry.sqe_next)) {
10
←
Assuming 'rr' is equal to null→
11
←
Loop condition is false. Execution continues on line 1262→
if (rr->flags & F_RIB_NOEVALUATE0x0002)
	printf("rde rib %s no evaluate\n", rr->name);
else if (rr->flags & F_RIB_NOFIB0x0004)
	printf("rde rib %s\n", rr->name);
else
	printf("rde rib %s rtable %u fib-update %s\n", rr->name,
	    rr->rtableid, rr->flags & F_RIB_NOFIBSYNC0x0008 ?
	    "no" : "yes");
}
printf("\n");
print_mrt(conf, 0, 0, "", "");
print_groups(conf);
12
←
Calling 'print_groups'→
TAILQ_FOREACH(r, conf->filters, entry)for((r) = ((conf->filters)->tqh_first); (r) != ((void *
)0); (r) = ((r)->entry.tqe_next))
print_rule(conf, r);
1267}