/* * Copyright (c) 2016 - present Facebook, Inc. * All rights reserved. * * This source code is licensed under the BSD style license found in the * LICENSE file in the root directory of this source tree. An additional grant * of patent rights can be found in the PATENTS file in the same directory. */ #include #include extern int rand(); // mocking gflags-generated field namespace execs { extern char* FLAGS_cli_string; int callAllSinks(const char* stringSource, char ** arrSource) { switch (rand()) { case 1: return execl(NULL, stringSource); case 2: return execl(stringSource, NULL); case 3: // just one test for varargs; assume we get it right in the other cases return execl(NULL, NULL, stringSource); case 4: return execlp(NULL, stringSource); case 5: return execlp(stringSource, NULL); case 6: return execle(NULL, stringSource); case 7: return execle(stringSource, NULL); case 8: return execv(stringSource, NULL); case 9: return execvp(stringSource, NULL); case 10: return execv(NULL, arrSource); case 11: return execvp(NULL, arrSource); } return 0; } int callExecBad() { const char* stringSource = std::getenv("ENV_VAR"); char* arrSource[1] = {std::getenv("ENV_VAR")}; switch (rand()) { case 1: return execl(NULL, stringSource); case 2: return execl(stringSource, NULL); case 3: // just one test for varargs; assume we get it right in the other cases return execl(NULL, NULL, stringSource); case 4: return execlp(NULL, stringSource); case 5: return execlp(stringSource, NULL); case 6: return execle(NULL, stringSource); case 7: return execle(stringSource, NULL); case 8: return execv(stringSource, NULL); case 9: return execvp(stringSource, NULL); case 10: return execv(NULL, arrSource); case 11: return execvp(NULL, arrSource); case 12: return execve(stringSource, NULL, NULL); case 13: return execve(NULL, arrSource, NULL); case 14: return system(stringSource); } return 0; } extern char* getenv(const char* var); void execConstantStringOk() { callAllSinks("something.sh", NULL); } void customGetEnvOk() { const char* source = execs::getenv("ENV_VAR"); return execl(NULL, source); } void exec_flag_bad() { execl(FLAGS_cli_string, NULL); } }