/usr/src/lib/libc/gen/getpwent.c

Bug Summary

File:	src/lib/libc/gen/getpwent.c
Warning:	line 414, column 3 Array subscript is undefined

Annotated Source Code

Press '?' to see keyboard shortcuts

Show analyzer invocation

clang -cc1 -cc1 -triple amd64-unknown-openbsd7.4 -analyze -disable-free -clear-ast-before-backend -disable-llvm-verifier -discard-value-names -main-file-name getpwent.c -analyzer-checker=core -analyzer-checker=apiModeling -analyzer-checker=unix -analyzer-checker=deadcode -analyzer-checker=security.insecureAPI.UncheckedReturn -analyzer-checker=security.insecureAPI.getpw -analyzer-checker=security.insecureAPI.gets -analyzer-checker=security.insecureAPI.mktemp -analyzer-checker=security.insecureAPI.mkstemp -analyzer-checker=security.insecureAPI.vfork -analyzer-checker=nullability.NullPassedToNonnull -analyzer-checker=nullability.NullReturnedFromNonnull -analyzer-output plist -w -setup-static-analyzer -mrelocation-model pic -pic-level 1 -pic-is-pie -mframe-pointer=all -relaxed-aliasing -ffp-contract=on -fno-rounding-math -mconstructor-aliases -funwind-tables=2 -target-cpu x86-64 -target-feature +retpoline-indirect-calls -target-feature +retpoline-indirect-branches -tune-cpu generic -debugger-tuning=gdb -fcoverage-compilation-dir=/usr/src/lib/libc/obj -resource-dir /usr/local/llvm16/lib/clang/16 -include namespace.h -I /usr/src/lib/libc/include -I /usr/src/lib/libc/hidden -D __LIBC__ -D APIWARN -D YP -I /usr/src/lib/libc/yp -I /usr/src/lib/libc -I /usr/src/lib/libc/gdtoa -I /usr/src/lib/libc/arch/amd64/gdtoa -D INFNAN_CHECK -D MULTIPLE_THREADS -D NO_FENV_H -D USE_LOCALE -I /usr/src/lib/libc -I /usr/src/lib/libc/citrus -D RESOLVSORT -D FLOATING_POINT -D PRINTF_WIDE_CHAR -D SCANF_WIDE_CHAR -D FUTEX -internal-isystem /usr/local/llvm16/lib/clang/16/include -internal-externc-isystem /usr/include -O2 -fdebug-compilation-dir=/usr/src/lib/libc/obj -ferror-limit 19 -fwrapv -D_RET_PROTECTOR -ret-protector -fcf-protection=branch -fno-jump-tables -fgnuc-version=4.2.1 -vectorize-loops -vectorize-slp -fno-builtin-malloc -fno-builtin-calloc -fno-builtin-realloc -fno-builtin-valloc -fno-builtin-free -fno-builtin-strdup -fno-builtin-strndup -analyzer-output=html -faddrsig -D__GCC_HAVE_DWARF2_CFI_ASM=1 -o /home/ben/Projects/scan/2024-01-11-140451-98009-1 -x c /usr/src/lib/libc/gen/getpwent.c

1/*	$OpenBSD: getpwent.c,v 1.66 2022/08/02 17:00:15 deraadt Exp $ */
2/*
* Copyright (c) 2008 Theo de Raadt
* Copyright (c) 1988, 1993
*	The Regents of the University of California.  All rights reserved.
* Portions Copyright (c) 1994, 1995, 1996, Jason Downs.  All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
* 1. Redistributions of source code must retain the above copyright
*    notice, this list of conditions and the following disclaimer.
* 2. Redistributions in binary form must reproduce the above copyright
*    notice, this list of conditions and the following disclaimer in the
*    documentation and/or other materials provided with the distribution.
* 3. Neither the name of the University nor the names of its contributors
*    may be used to endorse or promote products derived from this software
*    without specific prior written permission.
*
* THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
* ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
* SUCH DAMAGE.
*/

33#include <sys/types.h>
34#include <sys/mman.h>
35#include <fcntl.h>
36#include <db.h>
37#include <syslog.h>
38#include <pwd.h>
39#include <errno(*__errno()).h>
40#include <unistd.h>
41#include <stdbool.h>
42#include <stdlib.h>
43#include <string.h>
44#include <limits.h>
45#include <netgroup.h>
46#ifdef YP1
47#include <stdio.h>
48#include <rpc/rpc.h>
49#include <rpcsvc/yp.h>
50#include <rpcsvc/ypclnt.h>
51#include "ypinternal.h"
52#include "ypexclude.h"
53#endif
54#include "thread_private.h"

56#define MINIMUM(a, b)(((a) < (b)) ? (a) : (b))	(((a) < (b)) ? (a) : (b))

58struct pw_storage {
struct passwd pw;
uid_t uid;
char name[_PW_NAME_LEN31 + 1];
char pwbuf[_PW_BUF_LEN1024];
63};

65_THREAD_PRIVATE_KEY(pw)static void *_thread_tagname_pw;

67static DB *_pw_db;			/* password database */

69/* mmap'd password storage */
70static struct pw_storage *_pw_storage = MAP_FAILED((void *)-1);

72/* Following are used only by setpwent(), getpwent(), and endpwent() */
73static int _pw_keynum;			/* key counter */
74static int _pw_stayopen;		/* keep fd's open */
75static int _pw_flags;			/* password flags */

77static int __hashpw(DBT *, char *buf, size_t buflen, struct passwd *, int *);
78static int __initdb(int);
79static struct passwd *_pwhashbyname(const char *name, char *buf,
size_t buflen, struct passwd *pw, int *);
81static struct passwd *_pwhashbyuid(uid_t uid, char *buf,
size_t buflen, struct passwd *pw, int *);

84#ifdef YP1
85static char	*__ypdomain;

87/* Following are used only by setpwent(), getpwent(), and endpwent() */
88enum _ypmode { YPMODE_NONE, YPMODE_FULL, YPMODE_USER, YPMODE_NETGRP };
89static enum	_ypmode __ypmode;
90static char	*__ypcurrent;
91static int	__ypcurrentlen;
92static int	__yp_pw_flags;
93static int	__getpwent_has_yppw = -1;
94static struct _ypexclude *__ypexhead;

96static int __has_yppw(void);
97static int __has_ypmaster(void);
98static int __ypparse(struct passwd *pw, char *s, int);

100#define LOOKUP_BYNAME0 0
101#define LOOKUP_BYUID1 1
102static struct passwd *__yppwlookup(int, char *, uid_t, struct passwd *,
  char *, size_t, int *);

105/* macro for deciding which YP maps to use. */
106#define PASSWD_BYNAME(__has_ypmaster() ? "master.passwd.byname" : "passwd.byname") \
(__has_ypmaster() ? "master.passwd.byname" : "passwd.byname")
108#define PASSWD_BYUID(__has_ypmaster() ? "master.passwd.byuid" : "passwd.byuid") \
(__has_ypmaster() ? "master.passwd.byuid" : "passwd.byuid")

111static struct passwd *__ypproto;

113static void __ypproto_set(struct passwd *, struct pw_storage *, int, int *);

115static void
116__ypproto_set(struct passwd *pw, struct pw_storage *buf, int flags,
  int *yp_pw_flagsp)
118{
char *ptr = buf->pwbuf;
__ypproto = &buf->pw;

/* name */
if (pw->pw_name && (pw->pw_name)[0]) {
bcopy(pw->pw_name, ptr, strlen(pw->pw_name) + 1);
__ypproto->pw_name = ptr;
ptr += (strlen(pw->pw_name) + 1);
} else
__ypproto->pw_name = NULL((void *)0);

/* password */
if (pw->pw_passwd && (pw->pw_passwd)[0]) {
bcopy(pw->pw_passwd, ptr, strlen(pw->pw_passwd) + 1);
__ypproto->pw_passwd = ptr;
ptr += (strlen(pw->pw_passwd) + 1);
} else
__ypproto->pw_passwd = NULL((void *)0);

/* uid */
__ypproto->pw_uid = pw->pw_uid;

/* gid */
__ypproto->pw_gid = pw->pw_gid;

/* change (ignored anyway) */
__ypproto->pw_change = pw->pw_change;

/* class (ignored anyway) */
__ypproto->pw_class = "";

/* gecos */
if (pw->pw_gecos && (pw->pw_gecos)[0]) {
bcopy(pw->pw_gecos, ptr, strlen(pw->pw_gecos) + 1);
__ypproto->pw_gecos = ptr;
ptr += (strlen(pw->pw_gecos) + 1);
} else
__ypproto->pw_gecos = NULL((void *)0);

/* dir */
if (pw->pw_dir && (pw->pw_dir)[0]) {
bcopy(pw->pw_dir, ptr, strlen(pw->pw_dir) + 1);
__ypproto->pw_dir = ptr;
ptr += (strlen(pw->pw_dir) + 1);
} else
__ypproto->pw_dir = NULL((void *)0);

/* shell */
if (pw->pw_shell && (pw->pw_shell)[0]) {
bcopy(pw->pw_shell, ptr, strlen(pw->pw_shell) + 1);
__ypproto->pw_shell = ptr;
ptr += (strlen(pw->pw_shell) + 1);
} else
__ypproto->pw_shell = NULL((void *)0);

/* expire (ignored anyway) */
__ypproto->pw_expire = pw->pw_expire;

/* flags */
*yp_pw_flagsp = flags;
179}

181static int
182__ypparse(struct passwd *pw, char *s, int yp_pw_flags)
183{
char *bp, *cp, *endp;
u_long ul;
int count = 0;

/* count the colons. */
bp = s;
while (*bp != '\0') {
if (*bp++ == ':')
	count++;
}

/* since this is currently using strsep(), parse it first */
bp = s;
pw->pw_name = strsep(&bp, ":\n");
pw->pw_passwd = strsep(&bp, ":\n");
if (!(cp = strsep(&bp, ":\n")))
return (1);
ul = strtoul(cp, &endp, 10);
if (endp == cp || *endp != '\0' || ul >= UID_MAX0xffffffffU)
return (1);
pw->pw_uid = (uid_t)ul;
if (!(cp = strsep(&bp, ":\n")))
return (1);
ul = strtoul(cp, &endp, 10);
if (endp == cp || *endp != '\0' || ul >= GID_MAX0xffffffffU)
return (1);
pw->pw_gid = (gid_t)ul;
if (count == 9) {
long l;

/* If the ypserv gave us all the fields, use them. */
pw->pw_class = strsep(&bp, ":\n");
if (!(cp = strsep(&bp, ":\n")))
	return (1);
l = strtol(cp, &endp, 10);
if (endp == cp || *endp != '\0' || l >= INT_MAX0x7fffffff || l <= INT_MIN(-0x7fffffff-1))
	return (1);
pw->pw_change = (time_t)l;
if (!(cp = strsep(&bp, ":\n")))
	return (1);
l = strtol(cp, &endp, 10);
if (endp == cp || *endp != '\0' || l >= INT_MAX0x7fffffff || l <= INT_MIN(-0x7fffffff-1))
	return (1);
pw->pw_expire = (time_t)l;
} else {
/* ..else it is a normal ypserv. */
pw->pw_class = "";
pw->pw_change = 0;
pw->pw_expire = 0;
}
pw->pw_gecos = strsep(&bp, ":\n");
pw->pw_dir = strsep(&bp, ":\n");
pw->pw_shell = strsep(&bp, ":\n");

/* now let the prototype override, if set. */
if (__ypproto) {
if (!(yp_pw_flags & _PASSWORD_NOUID0x01))
	pw->pw_uid = __ypproto->pw_uid;
if (!(yp_pw_flags & _PASSWORD_NOGID0x02))
	pw->pw_gid = __ypproto->pw_gid;
if (__ypproto->pw_gecos)
	pw->pw_gecos = __ypproto->pw_gecos;
if (__ypproto->pw_dir)
	pw->pw_dir = __ypproto->pw_dir;
if (__ypproto->pw_shell)
	pw->pw_shell = __ypproto->pw_shell;
}
return (0);
252}
253#endif

255static struct passwd *
256__get_pw_buf(char **bufp, size_t *buflenp, uid_t uid, const char *name)
257{
bool_Bool remap = true1;

/* Unmap the old buffer unless we are looking up the same uid/name */
if (_pw_storage != MAP_FAILED((void *)-1)) {
if (name != NULL((void *)0)) {
	if (strcmp(_pw_storage->name, name) == 0) {
264#ifdef PWDEBUG
		struct syslog_data sdata = SYSLOG_DATA_INIT{0, (const char *)0, (1<<3), 0xff};
		syslog_r(LOG_CRIT2 | LOG_CONS0x02, &sdata,
		    "repeated passwd lookup of user \"%s\"",
		    name);
269#endif
		remap = false0;
	}
} else if (uid != (uid_t)-1) {
	if (_pw_storage->uid == uid) {
274#ifdef PWDEBUG
		struct syslog_data sdata = SYSLOG_DATA_INIT{0, (const char *)0, (1<<3), 0xff};
		syslog_r(LOG_CRIT2 | LOG_CONS0x02, &sdata,
		    "repeated passwd lookup of uid %u",
		    uid);
279#endif
		remap = false0;
	}
}
if (remap)
	munmap(_pw_storage, sizeof(*_pw_storage));
}

if (remap) {
_pw_storage = mmap(NULL((void *)0), sizeof(*_pw_storage),
    PROT_READ0x01|PROT_WRITE0x02, MAP_PRIVATE0x0002|MAP_ANON0x1000, -1, 0);
if (_pw_storage == MAP_FAILED((void *)-1))
	return NULL((void *)0);
if (name != NULL((void *)0))
	strlcpy(_pw_storage->name, name, sizeof(_pw_storage->name));
_pw_storage->uid = uid;
}

*bufp = _pw_storage->pwbuf;
*buflenp = sizeof(_pw_storage->pwbuf);
return &_pw_storage->pw;
300}

302struct passwd *
303getpwent(void)
304{
305#ifdef YP1
static char *name = NULL((void *)0);
char *map;
308#endif
char bf[1 + sizeof(_pw_keynum)];
struct passwd *pw, *ret = NULL((void *)0);
char *pwbuf;
size_t buflen;
DBT key;

_THREAD_PRIVATE_MUTEX_LOCK(pw)do { if (_thread_cb.tc_tag_lock != ((void *)0)) _thread_cb.tc_tag_lock
(&(_thread_tagname_pw)); } while (0);
1
Assuming field 'tc_tag_lock' is equal to null→
2
←
Taking false branch→
if (!_pw_db && !__initdb(0))
3
←
Loop condition is false.  Exiting loop→
4
←
Assuming '_pw_db' is non-null→
goto done;

/* Allocate space for struct and strings, unmapping the old. */
if ((pw = __get_pw_buf(&pwbuf, &buflen, -1, NULL((void *)0))) == NULL((void *)0))
goto done;

323#ifdef YP1
map = PASSWD_BYNAME(__has_ypmaster() ? "master.passwd.byname" : "passwd.byname");
5
←
Taking false branch→
6
←
Assuming the condition is false→

if (__getpwent_has_yppw == -1)
7
←
Assuming the condition is false→
__getpwent_has_yppw = __has_yppw();

329again:
if (__getpwent_has_yppw && (__ypmode != YPMODE_NONE)) {
8
←
Assuming '__getpwent_has_yppw' is not equal to 0→
9
←
Assuming '__ypmode' is not equal to YPMODE_NONE→
10
←
Taking true branch→
const char *user, *host, *dom;
int keylen, datalen, r, s;
11
←
'datalen' declared without an initial value→
char *key, *data = NULL((void *)0);

if (!__ypdomain)
12
←
Assuming '__ypdomain' is null→
13
←
Taking true branch→
	yp_get_default_domain(&__ypdomain);
switch (__ypmode) {
14
←
Control jumps to 'case YPMODE_NONE:'  at line 409→
case YPMODE_FULL:
	if (__ypcurrent) {
		r = yp_next(__ypdomain, map,
		    __ypcurrent, __ypcurrentlen,
		    &key, &keylen, &data, &datalen);
		free(__ypcurrent);
		__ypcurrent = NULL((void *)0);
		if (r != 0) {
			__ypmode = YPMODE_NONE;
			free(data);
			goto again;
		}
		__ypcurrent = key;
		__ypcurrentlen = keylen;
	} else {
		r = yp_first(__ypdomain, map,
		    &__ypcurrent, &__ypcurrentlen,
		    &data, &datalen);
		if (r != 0 ||
		    __ypcurrentlen > buflen) {
			__ypmode = YPMODE_NONE;
			free(data);
			goto again;
		}
	}
	bcopy(data, pwbuf, datalen);
	free(data);
	break;
case YPMODE_NETGRP:
	s = getnetgrent(&host, &user, &dom);
	if (s == 0) {	/* end of group */
		endnetgrent();
		__ypmode = YPMODE_NONE;
		goto again;
	}
	if (user && *user) {
		r = yp_match(__ypdomain, map,
		    user, strlen(user), &data, &datalen);
	} else
		goto again;
	if (r != 0 ||
	    __ypcurrentlen > buflen) {
		/*
		 * if the netgroup is invalid, keep looking
		 * as there may be valid users later on.
		 */
		free(data);
		goto again;
	}
	bcopy(data, pwbuf, datalen);
	free(data);
	break;
case YPMODE_USER:
	if (name) {
		r = yp_match(__ypdomain, map,
		    name, strlen(name), &data, &datalen);
		__ypmode = YPMODE_NONE;
		free(name);
		name = NULL((void *)0);
		if (r != 0 ||
		    __ypcurrentlen > buflen) {
			free(data);
			goto again;
		}
		bcopy(data, pwbuf, datalen);
		free(data);
	} else {		/* XXX */
		__ypmode = YPMODE_NONE;
		goto again;
	}
	break;
case YPMODE_NONE:
	/* NOTREACHED */
	break;
}

pwbuf[datalen] = '\0';
15
←
 Execution continues on line 414→
16
←
Array subscript is undefined
if (__ypparse(pw, pwbuf, __yp_pw_flags))
	goto again;
ret = pw;
goto done;
}
420#endif

++_pw_keynum;
bf[0] = _PW_KEYBYNUM'2';
bcopy((char *)&_pw_keynum, &bf[1], sizeof(_pw_keynum));
key.data = (u_char *)bf;
key.size = 1 + sizeof(_pw_keynum);
if (__hashpw(&key, pwbuf, buflen, pw, &_pw_flags)) {
428#ifdef YP1
static struct pw_storage __yppbuf;
const char *user, *host, *dom;

/* if we don't have YP at all, don't bother. */
if (__getpwent_has_yppw) {
	if (pw->pw_name[0] == '+') {
		/* set the mode */
		switch (pw->pw_name[1]) {
		case '\0':
			__ypmode = YPMODE_FULL;
			break;
		case '@':
			__ypmode = YPMODE_NETGRP;
			setnetgrent(pw->pw_name + 2);
			break;
		default:
			__ypmode = YPMODE_USER;
			name = strdup(pw->pw_name + 1);
			break;
		}

		__ypproto_set(pw, &__yppbuf, _pw_flags,
		    &__yp_pw_flags);
		goto again;
	} else if (pw->pw_name[0] == '-') {
		/* an attempted exclusion */
		switch (pw->pw_name[1]) {
		case '\0':
			break;
		case '@':
			setnetgrent(pw->pw_name + 2);
			while (getnetgrent(&host, &user, &dom)) {
				if (user && *user)
					__ypexclude_add(&__ypexhead,
					    user);
			}
			endnetgrent();
			break;
		default:
			__ypexclude_add(&__ypexhead,
			    pw->pw_name + 1);
			break;
		}
		goto again;
	}
}
475#endif
ret = pw;
goto done;
}

480done:
_THREAD_PRIVATE_MUTEX_UNLOCK(pw)do { if (_thread_cb.tc_tag_unlock != ((void *)0)) _thread_cb.
tc_tag_unlock(&(_thread_tagname_pw)); } while (0);
return (ret);
483}

485#ifdef YP1
486/*
* See if the YP token is in the database.  Only works if pwd_mkdb knows
* about the token.
*/
490static int
491__has_yppw(void)
492{
DBT key, data, pkey, pdata;
char bf[2];

key.data = (u_char *)_PW_YPTOKEN"__YP!";
key.size = strlen(_PW_YPTOKEN"__YP!");

/* Pre-token database support. */
bf[0] = _PW_KEYBYNAME'1';
bf[1] = '+';
pkey.data = (u_char *)bf;
pkey.size = sizeof(bf);

if ((_pw_db->get)(_pw_db, &key, &data, 0) &&
   (_pw_db->get)(_pw_db, &pkey, &pdata, 0))
return (0);	/* No YP. */
return (1);
509}

511/*
* See if there's a master.passwd map.
*/
514static int
515__has_ypmaster(void)
516{
int keylen, resultlen;
char *key, *result;
static int checked = -1;
static uid_t saved_uid, saved_euid;
uid_t uid = getuid(), euid = geteuid();

/*
* Do not recheck IFF the saved UID and the saved
* EUID are the same. In all other cases, recheck.
*/
if (checked != -1 && saved_uid == uid && saved_euid == euid)
return (checked);

if (euid != 0) {
saved_uid = uid;
saved_euid = euid;
checked = 0;
return (checked);
}

if (!__ypdomain)
yp_get_default_domain(&__ypdomain);

if (yp_first(__ypdomain, "master.passwd.byname",
   &key, &keylen, &result, &resultlen)) {
saved_uid = uid;
saved_euid = euid;
checked = 0;
return (checked);
}
free(result);
free(key);

saved_uid = uid;
saved_euid = euid;
checked = 1;
return (checked);
554}

556static struct passwd *
557__yppwlookup(int lookup, char *name, uid_t uid, struct passwd *pw,
  char *buf, size_t buflen, int *flagsp)
559{
char bf[1 + _PW_NAME_LEN31], *ypcurrent = NULL((void *)0), *map = NULL((void *)0);
int yp_pw_flags = 0, ypcurrentlen, r, s = -1, pw_keynum;
static struct pw_storage __yppbuf;
struct _ypexclude *ypexhead = NULL((void *)0);
const char *host, *user, *dom;
DBT key;

for (pw_keynum = 1; pw_keynum; pw_keynum++) {
bf[0] = _PW_KEYBYNUM'2';
bcopy((char *)&pw_keynum, &bf[1], sizeof(pw_keynum));
key.data = (u_char *)bf;
key.size = 1 + sizeof(pw_keynum);
if (__hashpw(&key, buf, buflen, pw, flagsp) == 0)
	break;
switch (pw->pw_name[0]) {
case '+':
	if (!__ypdomain)
		yp_get_default_domain(&__ypdomain);
	__ypproto_set(pw, &__yppbuf, *flagsp, &yp_pw_flags);
	if (!map) {
		if (lookup == LOOKUP_BYNAME0) {
			if ((name = strdup(name)) == NULL((void *)0)) {
				pw = NULL((void *)0);
				goto done;
			}
			map = PASSWD_BYNAME(__has_ypmaster() ? "master.passwd.byname" : "passwd.byname");
		} else {
			if (asprintf(&name, "%u", uid) == -1) {
				pw = NULL((void *)0);
				goto done;
			}
			map = PASSWD_BYUID(__has_ypmaster() ? "master.passwd.byuid" : "passwd.byuid");
		}
	}

	switch (pw->pw_name[1]) {
	case '\0':
		free(ypcurrent);
		ypcurrent = NULL((void *)0);
		r = yp_match(__ypdomain, map,
		    name, strlen(name),
		    &ypcurrent, &ypcurrentlen);
		if (r != 0 || ypcurrentlen > buflen) {
			free(ypcurrent);
			ypcurrent = NULL((void *)0);
			continue;
		}
		break;
	case '@':
609pwnam_netgrp:
		free(ypcurrent);
		ypcurrent = NULL((void *)0);
		if (s == -1)	/* first time */
			setnetgrent(pw->pw_name + 2);
		s = getnetgrent(&host, &user, &dom);
		if (s == 0) {	/* end of group */
			endnetgrent();
			s = -1;
			continue;
		} else {
			if (user && *user) {
				r = yp_match(__ypdomain, map,
				    user, strlen(user),
				    &ypcurrent, &ypcurrentlen);
			} else
				goto pwnam_netgrp;
			if (r != 0 || ypcurrentlen > buflen) {
				free(ypcurrent);
				ypcurrent = NULL((void *)0);
				/*
				 * just because this
				 * user is bad, doesn't
				 * mean they all are.
				 */
				goto pwnam_netgrp;
			}
		}
		break;
	default:
		free(ypcurrent);
		ypcurrent = NULL((void *)0);
		user = pw->pw_name + 1;
		r = yp_match(__ypdomain, map,
		    user, strlen(user),
		    &ypcurrent, &ypcurrentlen);
		if (r != 0 || ypcurrentlen > buflen) {
			free(ypcurrent);
			ypcurrent = NULL((void *)0);
			continue;
		}
		break;
	}
	bcopy(ypcurrent, buf, ypcurrentlen);
	buf[ypcurrentlen] = '\0';
	if (__ypparse(pw, buf, yp_pw_flags) ||
	    __ypexclude_is(&ypexhead, pw->pw_name)) {
		if (s == 1)	/* inside netgrp */
			goto pwnam_netgrp;
		continue;
	}
	break;
case '-':
	/* attempted exclusion */
	switch (pw->pw_name[1]) {
	case '\0':
		break;
	case '@':
		setnetgrent(pw->pw_name + 2);
		while (getnetgrent(&host, &user, &dom)) {
			if (user && *user)
				__ypexclude_add(&ypexhead, user);
		}
		endnetgrent();
		break;
	default:
		__ypexclude_add(&ypexhead, pw->pw_name + 1);
		break;
	}
	break;
}
if ((lookup == LOOKUP_BYUID1 && pw->pw_uid == uid) ||
    (lookup == LOOKUP_BYNAME0 && strcmp(pw->pw_name, name) == 0))
	goto done;
if (s == 1)	/* inside netgrp */
	goto pwnam_netgrp;
continue;
}
pw = NULL((void *)0);
688done:
__ypexclude_free(&ypexhead);
__ypproto = NULL((void *)0);
free(ypcurrent);
ypcurrent = NULL((void *)0);
if (map)
free(name);
return (pw);
696}
697#endif /* YP */

699static struct passwd *
700_pwhashbyname(const char *name, char *buf, size_t buflen, struct passwd *pw,
  int *flagsp)
702{
char bf[1 + _PW_NAME_LEN31];
size_t len;
DBT key;
int r;

len = strlen(name);
if (len > _PW_NAME_LEN31)
return (NULL((void *)0));
bf[0] = _PW_KEYBYNAME'1';
bcopy(name, &bf[1], MINIMUM(len, _PW_NAME_LEN)(((len) < (31)) ? (len) : (31)));
key.data = (u_char *)bf;
key.size = 1 + MINIMUM(len, _PW_NAME_LEN)(((len) < (31)) ? (len) : (31));
r = __hashpw(&key, buf, buflen, pw, flagsp);
if (r)
return (pw);
return (NULL((void *)0));
719}

721static struct passwd *
722_pwhashbyuid(uid_t uid, char *buf, size_t buflen, struct passwd *pw,
  int *flagsp)
724{
char bf[1 + sizeof(int)];
DBT key;
int r;

bf[0] = _PW_KEYBYUID'3';
bcopy(&uid, &bf[1], sizeof(uid));
key.data = (u_char *)bf;
key.size = 1 + sizeof(uid);
r = __hashpw(&key, buf, buflen, pw, flagsp);
if (r)
return (pw);
return (NULL((void *)0));
737}

739static int
740getpwnam_internal(const char *name, struct passwd *pw, char *buf, size_t buflen,
  struct passwd **pwretp, bool_Bool shadow, bool_Bool reentrant)
742{
struct passwd *pwret = NULL((void *)0);
int flags = 0, *flagsp = &flags;
int my_errno = 0;
int saved_errno, tmp_errno;

_THREAD_PRIVATE_MUTEX_LOCK(pw)do { if (_thread_cb.tc_tag_lock != ((void *)0)) _thread_cb.tc_tag_lock
(&(_thread_tagname_pw)); } while (0);
saved_errno = errno(*__errno());
errno(*__errno()) = 0;
if (!_pw_db && !__initdb(shadow))
goto fail;

if (!reentrant) {
/* Allocate space for struct and strings, unmapping the old. */
if ((pw = __get_pw_buf(&buf, &buflen, -1, name)) == NULL((void *)0))
	goto fail;
flagsp = &_pw_flags;
}

761#ifdef YP1
if (__has_yppw())
pwret = __yppwlookup(LOOKUP_BYNAME0, (char *)name, 0, pw,
    buf, buflen, flagsp);
765#endif /* YP */
if (!pwret)
pwret = _pwhashbyname(name, buf, buflen, pw, flagsp);

if (!_pw_stayopen) {
tmp_errno = errno(*__errno());
(void)(_pw_db->close)(_pw_db);
_pw_db = NULL((void *)0);
errno(*__errno()) = tmp_errno;
}
775fail:
if (pwretp)
*pwretp = pwret;
if (pwret == NULL((void *)0))
my_errno = errno(*__errno());
errno(*__errno()) = saved_errno;
_THREAD_PRIVATE_MUTEX_UNLOCK(pw)do { if (_thread_cb.tc_tag_unlock != ((void *)0)) _thread_cb.
tc_tag_unlock(&(_thread_tagname_pw)); } while (0);
return (my_errno);
783}

785int
786getpwnam_r(const char *name, struct passwd *pw, char *buf, size_t buflen,
  struct passwd **pwretp)
788{
return getpwnam_internal(name, pw, buf, buflen, pwretp, false0, true1);
790}
791DEF_WEAK(getpwnam_r)__asm__(".weak " "getpwnam_r" " ; " "getpwnam_r" " = " "_libc_getpwnam_r"
);

793struct passwd *
794getpwnam(const char *name)
795{
struct passwd *pw = NULL((void *)0);
int my_errno;

my_errno = getpwnam_internal(name, NULL((void *)0), NULL((void *)0), 0, &pw, false0, false0);
if (my_errno) {
pw = NULL((void *)0);
errno(*__errno()) = my_errno;
}
return (pw);
805}

807struct passwd *
808getpwnam_shadow(const char *name)
809{
struct passwd *pw = NULL((void *)0);
int my_errno;

my_errno = getpwnam_internal(name, NULL((void *)0), NULL((void *)0), 0, &pw, true1, false0);
if (my_errno) {
pw = NULL((void *)0);
errno(*__errno()) = my_errno;
}
return (pw);
819}
820DEF_WEAK(getpwnam_shadow)__asm__(".weak " "getpwnam_shadow" " ; " "getpwnam_shadow" " = "
 "_libc_getpwnam_shadow");

822static int
823getpwuid_internal(uid_t uid, struct passwd *pw, char *buf, size_t buflen,
  struct passwd **pwretp, bool_Bool shadow, bool_Bool reentrant)
825{
struct passwd *pwret = NULL((void *)0);
int flags = 0, *flagsp = &flags;
int my_errno = 0;
int saved_errno, tmp_errno;

_THREAD_PRIVATE_MUTEX_LOCK(pw)do { if (_thread_cb.tc_tag_lock != ((void *)0)) _thread_cb.tc_tag_lock
(&(_thread_tagname_pw)); } while (0);
saved_errno = errno(*__errno());
errno(*__errno()) = 0;
if (!_pw_db && !__initdb(shadow))
goto fail;

if (!reentrant) {
/* Allocate space for struct and strings, unmapping the old. */
if ((pw = __get_pw_buf(&buf, &buflen, uid, NULL((void *)0))) == NULL((void *)0))
	goto fail;
flagsp = &_pw_flags;
}

844#ifdef YP1
if (__has_yppw())
pwret = __yppwlookup(LOOKUP_BYUID1, NULL((void *)0), uid, pw,
    buf, buflen, flagsp);
848#endif /* YP */
if (!pwret)
pwret = _pwhashbyuid(uid, buf, buflen, pw, flagsp);

if (!_pw_stayopen) {
tmp_errno = errno(*__errno());
(void)(_pw_db->close)(_pw_db);
_pw_db = NULL((void *)0);
errno(*__errno()) = tmp_errno;
}
858fail:
if (pwretp)
*pwretp = pwret;
if (pwret == NULL((void *)0))
my_errno = errno(*__errno());
errno(*__errno()) = saved_errno;
_THREAD_PRIVATE_MUTEX_UNLOCK(pw)do { if (_thread_cb.tc_tag_unlock != ((void *)0)) _thread_cb.
tc_tag_unlock(&(_thread_tagname_pw)); } while (0);
return (my_errno);
866}


869int
870getpwuid_r(uid_t uid, struct passwd *pw, char *buf, size_t buflen,
  struct passwd **pwretp)
872{
return getpwuid_internal(uid, pw, buf, buflen, pwretp, false0, true1);
874}
875DEF_WEAK(getpwuid_r)__asm__(".weak " "getpwuid_r" " ; " "getpwuid_r" " = " "_libc_getpwuid_r"
);

877struct passwd *
878getpwuid(uid_t uid)
879{
struct passwd *pw = NULL((void *)0);
int my_errno;

my_errno = getpwuid_internal(uid, NULL((void *)0), NULL((void *)0), 0, &pw, false0, false0);
if (my_errno) {
pw = NULL((void *)0);
errno(*__errno()) = my_errno;
}
return (pw);
889}

891struct passwd *
892getpwuid_shadow(uid_t uid)
893{
struct passwd *pw = NULL((void *)0);
int my_errno;

my_errno = getpwuid_internal(uid, NULL((void *)0), NULL((void *)0), 0, &pw, true1, false0);
if (my_errno) {
pw = NULL((void *)0);
errno(*__errno()) = my_errno;
}
return (pw);
903}
904DEF_WEAK(getpwuid_shadow)__asm__(".weak " "getpwuid_shadow" " ; " "getpwuid_shadow" " = "
 "_libc_getpwuid_shadow");

906int
907setpassent(int stayopen)
908{
_THREAD_PRIVATE_MUTEX_LOCK(pw)do { if (_thread_cb.tc_tag_lock != ((void *)0)) _thread_cb.tc_tag_lock
(&(_thread_tagname_pw)); } while (0);
_pw_keynum = 0;
_pw_stayopen = stayopen;
912#ifdef YP1
__ypmode = YPMODE_NONE;
free(__ypcurrent);
__ypcurrent = NULL((void *)0);
__ypexclude_free(&__ypexhead);
__ypproto = NULL((void *)0);
918#endif
_THREAD_PRIVATE_MUTEX_UNLOCK(pw)do { if (_thread_cb.tc_tag_unlock != ((void *)0)) _thread_cb.
tc_tag_unlock(&(_thread_tagname_pw)); } while (0);
return (1);
921}
922DEF_WEAK(setpassent)__asm__(".weak " "setpassent" " ; " "setpassent" " = " "_libc_setpassent"
);

924void
925setpwent(void)
926{
(void) setpassent(0);
928}

930void
931endpwent(void)
932{
int saved_errno;

_THREAD_PRIVATE_MUTEX_LOCK(pw)do { if (_thread_cb.tc_tag_lock != ((void *)0)) _thread_cb.tc_tag_lock
(&(_thread_tagname_pw)); } while (0);
saved_errno = errno(*__errno());
_pw_keynum = 0;
if (_pw_db) {
(void)(_pw_db->close)(_pw_db);
_pw_db = NULL((void *)0);
}
942#ifdef YP1
__ypmode = YPMODE_NONE;
free(__ypcurrent);
__ypcurrent = NULL((void *)0);
__ypexclude_free(&__ypexhead);
__ypproto = NULL((void *)0);
948#endif
errno(*__errno()) = saved_errno;
_THREAD_PRIVATE_MUTEX_UNLOCK(pw)do { if (_thread_cb.tc_tag_unlock != ((void *)0)) _thread_cb.
tc_tag_unlock(&(_thread_tagname_pw)); } while (0);
951}

953static int
954__initdb(int shadow)
955{
static int warned;
int saved_errno = errno(*__errno());

959#ifdef YP1
__ypmode = YPMODE_NONE;
__getpwent_has_yppw = -1;
962#endif
if (shadow)
_pw_db = dbopen(_PATH_SMP_DB"/etc/spwd.db", O_RDONLY0x0000, 0, DB_HASH, NULL((void *)0));
if (!_pw_db)
   _pw_db = dbopen(_PATH_MP_DB"/etc/pwd.db", O_RDONLY0x0000, 0, DB_HASH, NULL((void *)0));
if (_pw_db) {
errno(*__errno()) = saved_errno;
return (1);
}
if (!warned) {
saved_errno = errno(*__errno());
errno(*__errno()) = saved_errno;
warned = 1;
}
return (0);
977}

979static int
980__hashpw(DBT *key, char *buf, size_t buflen, struct passwd *pw,
  int *flagsp)
982{
char *p, *t;
DBT data;

if ((_pw_db->get)(_pw_db, key, &data, 0))
return (0);
p = (char *)data.data;
if (data.size > buflen) {
errno(*__errno()) = ERANGE34;
return (0);
}

t = buf;
995#define	EXPAND(e)e = t; while ((*t++ = *p++));	e = t; while ((*t++ = *p++));
EXPAND(pw->pw_name)pw->pw_name = t; while ((*t++ = *p++));;
EXPAND(pw->pw_passwd)pw->pw_passwd = t; while ((*t++ = *p++));;
bcopy(p, (char *)&pw->pw_uid, sizeof(int));
p += sizeof(int);
bcopy(p, (char *)&pw->pw_gid, sizeof(int));
p += sizeof(int);
bcopy(p, (char *)&pw->pw_change, sizeof(time_t));
p += sizeof(time_t);
EXPAND(pw->pw_class)pw->pw_class = t; while ((*t++ = *p++));;
EXPAND(pw->pw_gecos)pw->pw_gecos = t; while ((*t++ = *p++));;
EXPAND(pw->pw_dir)pw->pw_dir = t; while ((*t++ = *p++));;
EXPAND(pw->pw_shell)pw->pw_shell = t; while ((*t++ = *p++));;
bcopy(p, (char *)&pw->pw_expire, sizeof(time_t));
p += sizeof(time_t);

/* See if there's any data left.  If so, read in flags. */
if (data.size > (p - (char *)data.data)) {
bcopy(p, (char *)flagsp, sizeof(int));
p += sizeof(int);
} else
*flagsp = _PASSWORD_NOUID0x01|_PASSWORD_NOGID0x02;	/* default */
return (1);
1018}