[sudo-workers] uninits and strsplit problems

Todd C. Miller Todd.Miller at courtesan.com
Tue Aug 18 09:34:04 MDT 2015


On Tue, 18 Aug 2015 09:06:02 -0600, "Todd C. Miller" wrote:

> These all look like false positives to me.  sudo_strsplit() is never
> called with both str and *last NULL.  Also, ep is not used uninitialized
> because it is always set by the first call to sudo_strsplit() when
> str is not NULL.

FYI, strsplit is a lot like strtok_r in its use of a last pointer.
There should be no need to initialize it before use as it gets set
by the first call with a non-NULL str parameter.

 - todd


More information about the sudo-workers mailing list