[sudo-workers] uninits and strsplit problems
Todd C. Miller
Todd.Miller at courtesan.com
Tue Aug 18 09:34:04 MDT 2015
On Tue, 18 Aug 2015 09:06:02 -0600, "Todd C. Miller" wrote:
> These all look like false positives to me. sudo_strsplit() is never
> called with both str and *last NULL. Also, ep is not used uninitialized
> because it is always set by the first call to sudo_strsplit() when
> str is not NULL.
FYI, strsplit is a lot like strtok_r in its use of a last pointer.
There should be no need to initialize it before use as it gets set
by the first call with a non-NULL str parameter.
More information about the sudo-workers