Blame SOURCES/0001-mcstrans-Fir-RESOURCE_LEAK-and-USE_AFTER_FREE-coveri.patch

a85796
From 58a11e55120de4700d4e874dee0d8c36d13caedd Mon Sep 17 00:00:00 2001
a85796
From: Petr Lautrbach <plautrba@redhat.com>
a85796
Date: Wed, 28 Nov 2018 18:28:05 +0100
a85796
Subject: [PATCH] mcstrans: Fir RESOURCE_LEAK and USE_AFTER_FREE coverity scan
a85796
 defects
a85796
a85796
---
a85796
 mcstrans/src/mcstrans.c  | 21 +++++++++++++++++++--
a85796
 mcstrans/src/mcstransd.c |  4 +++-
a85796
 2 files changed, 22 insertions(+), 3 deletions(-)
a85796
a85796
diff --git a/mcstrans/src/mcstrans.c b/mcstrans/src/mcstrans.c
a85796
index e92dfddb0d20..d0690e6b0dca 100644
a85796
--- a/mcstrans/src/mcstrans.c
a85796
+++ b/mcstrans/src/mcstrans.c
a85796
@@ -633,16 +633,23 @@ add_cache(domain_t *domain, char *raw, char *trans) {
a85796
 
a85796
 	map->raw = strdup(raw);
a85796
 	if (!map->raw) {
a85796
+		free(map);
a85796
 		goto err;
a85796
 	}
a85796
 	map->trans = strdup(trans);
a85796
 	if (!map->trans) {
a85796
+		free(map->raw);
a85796
+		free(map);
a85796
 		goto err;
a85796
 	}
a85796
 
a85796
 	log_debug(" add_cache (%s,%s)\n", raw, trans);
a85796
-	if (add_to_hashtable(domain->raw_to_trans, map->raw, map) < 0)
a85796
+	if (add_to_hashtable(domain->raw_to_trans, map->raw, map) < 0) {
a85796
+		free(map->trans);
a85796
+		free(map->raw);
a85796
+		free(map);
a85796
 		goto err;
a85796
+	}
a85796
 
a85796
 	if (add_to_hashtable(domain->trans_to_raw, map->trans, map) < 0)
a85796
 		goto err;
a85796
@@ -1520,6 +1527,7 @@ trans_context(const char *incon, char **rcon) {
a85796
 			trans = compute_trans_from_raw(range, domain);
a85796
 			if (trans)
a85796
 				if (add_cache(domain, range, trans) < 0) {
a85796
+					free(trans);
a85796
 					free(range);
a85796
 					return -1;
a85796
 				}
a85796
@@ -1531,6 +1539,7 @@ trans_context(const char *incon, char **rcon) {
a85796
 				ltrans = compute_trans_from_raw(lrange, domain);
a85796
 				if (ltrans) {
a85796
 					if (add_cache(domain, lrange, ltrans) < 0) {
a85796
+						free(ltrans);
a85796
 						free(range);
a85796
 						return -1;
a85796
 					}
a85796
@@ -1549,6 +1558,7 @@ trans_context(const char *incon, char **rcon) {
a85796
 				utrans = compute_trans_from_raw(urange, domain);
a85796
 				if (utrans) {
a85796
 					if (add_cache(domain, urange, utrans) < 0) {
a85796
+						free(utrans);
a85796
 						free(ltrans);
a85796
 						free(range);
a85796
 						return -1;
a85796
@@ -1648,14 +1658,19 @@ untrans_context(const char *incon, char **rcon) {
a85796
 					canonical = compute_trans_from_raw(raw, domain);
a85796
 					if (canonical && strcmp(canonical, range))
a85796
 						if (add_cache(domain, raw, canonical) < 0) {
a85796
+							free(canonical);
a85796
 							free(range);
a85796
+							free(raw);
a85796
 							return -1;
a85796
 						}
a85796
 				}
a85796
-				if (canonical)
a85796
+				if (canonical) {
a85796
 					free(canonical);
a85796
+					free(raw);
a85796
+				}
a85796
 				if (add_cache(domain, raw, range) < 0) {
a85796
 					free(range);
a85796
+					free(raw);
a85796
 					return -1;
a85796
 				}
a85796
 			} else {
a85796
@@ -1673,6 +1688,7 @@ untrans_context(const char *incon, char **rcon) {
a85796
 						canonical = compute_trans_from_raw(lraw, domain);
a85796
 						if (canonical)
a85796
 							if (add_cache(domain, lraw, canonical) < 0) {
a85796
+								free(canonical);
a85796
 								free(lraw);
a85796
 								free(range);
a85796
 								return -1;
a85796
@@ -1704,6 +1720,7 @@ untrans_context(const char *incon, char **rcon) {
a85796
 						canonical = compute_trans_from_raw(uraw, domain);
a85796
 						if (canonical)
a85796
 							if (add_cache(domain, uraw, canonical) < 0) {
a85796
+								free(canonical);
a85796
 								free(uraw);
a85796
 								free(lraw);
a85796
 								free(range);
a85796
diff --git a/mcstrans/src/mcstransd.c b/mcstrans/src/mcstransd.c
a85796
index 59c152e73be1..5191fc98ef06 100644
a85796
--- a/mcstrans/src/mcstransd.c
a85796
+++ b/mcstrans/src/mcstransd.c
a85796
@@ -335,6 +335,7 @@ process_events(struct pollfd **ufds, int *nfds)
a85796
 					/* Setup pollfd for deletion later. */
a85796
 					(*ufds)[ii].fd = -1;
a85796
 					close(connfd);
a85796
+					connfd = -1;
a85796
 					/* So we don't get bothered later */
a85796
 					revents = revents & ~(POLLHUP);
a85796
 				}
a85796
@@ -348,10 +349,11 @@ process_events(struct pollfd **ufds, int *nfds)
a85796
 			/* Set the pollfd up for deletion later. */
a85796
 			(*ufds)[ii].fd = -1;
a85796
 			close(connfd);
a85796
+			connfd = -1;
a85796
 
a85796
 			revents = revents & ~(POLLHUP);
a85796
 		}
a85796
-		if (revents) {
a85796
+		if (revents && connfd != -1) {
a85796
 			syslog(LOG_ERR, "Unknown/error events (%x) encountered"
a85796
 					" for fd (%d)\n", revents, connfd);
a85796
 
a85796
-- 
a85796
2.32.0
a85796