1 /* $Header: str.c,v 3.0.1.9 90/10/16 10:41:21 lwall Locked $
3 * Copyright (c) 1989, Larry Wall
5 * You may distribute under the terms of the GNU General Public License
6 * as specified in the README file that comes with the perl 3.0 kit.
9 * Revision 3.0.1.9 90/10/16 10:41:21 lwall
10 * patch29: the undefined value could get defined by devious means
11 * patch29: undefined values compared inconsistently
12 * patch29: taintperl now checks for world writable PATH components
14 * Revision 3.0.1.8 90/08/09 05:22:18 lwall
15 * patch19: the number to string converter wasn't allocating enough space
16 * patch19: tainting didn't work on setgid scripts
18 * Revision 3.0.1.7 90/03/27 16:24:11 lwall
19 * patch16: strings with prefix chopped off sometimes freed wrong
20 * patch16: taint check blows up on undefined array element
22 * Revision 3.0.1.6 90/03/12 17:02:14 lwall
23 * patch13: substr as lvalue didn't invalidate old numeric value
25 * Revision 3.0.1.5 90/02/28 18:30:38 lwall
26 * patch9: you may now undef $/ to have no input record separator
27 * patch9: nested evals clobbered their longjmp environment
28 * patch9: sometimes perl thought ordinary data was a symbol table entry
29 * patch9: insufficient space allocated for numeric string on sun4
30 * patch9: underscore in an array name in a double-quoted string not recognized
31 * patch9: "@foo{}" not recognized unless %foo defined
32 * patch9: "$foo[$[]" gives error
34 * Revision 3.0.1.4 89/12/21 20:21:35 lwall
35 * patch7: errno may now be a macro with an lvalue
36 * patch7: made nested or recursive foreach work right
38 * Revision 3.0.1.3 89/11/17 15:38:23 lwall
39 * patch5: some machines typedef unchar too
40 * patch5: substitution on leading components occasionally caused <> corruption
42 * Revision 3.0.1.2 89/11/11 04:56:22 lwall
43 * patch2: uchar gives Crays fits
45 * Revision 3.0.1.1 89/10/26 23:23:41 lwall
46 * patch1: string ordering tests were wrong
47 * patch1: $/ now works even when STDSTDIO undefined
49 * Revision 3.0 89/10/18 15:23:38 lwall
58 extern char **environ;
66 tainted |= str->str_tainted;
68 return str->str_pok ? str->str_ptr : str_2ptr(str);
72 /* dlb ... guess we have a "crippled cc".
73 * dlb the following functions are usually macros.
80 if (*Str->str_ptr > '0' ||
82 (Str->str_cur && *Str->str_ptr != '0'))
87 return (Str->str_u.str_nval != 0.0);
97 tainted |= Str->str_tainted;
100 return Str->str_u.str_nval;
101 return str_2num(Str);
103 #endif /* str_gnum */
104 /* dlb ... end of crutch */
112 unsigned long newlen;
115 register char *s = str->str_ptr;
118 if (newlen >= 0x10000) {
119 fprintf(stderr, "Allocation too large: %lx\n", newlen);
123 if (str->str_state == SS_INCR) { /* data before str_ptr? */
124 str->str_len += str->str_u.str_useful;
125 str->str_ptr -= str->str_u.str_useful;
126 str->str_u.str_useful = 0L;
127 bcopy(s, str->str_ptr, str->str_cur+1);
129 str->str_state = SS_NORM; /* normal again */
130 if (newlen > str->str_len)
131 newlen += 10 * (newlen - str->str_cur); /* avoid copy each time */
133 if (newlen > str->str_len) { /* need more room? */
135 Renew(s,newlen,char);
137 New(703,s,newlen,char);
139 str->str_len = newlen;
149 str->str_pok = 0; /* invalidate pointer */
150 if (str->str_state == SS_INCR)
153 str->str_u.str_nval = num;
154 str->str_state = SS_NORM;
155 str->str_nok = 1; /* validate number */
157 str->str_tainted = tainted;
173 olderrno = errno; /* some Xenix systems wipe out errno here */
174 #if defined(scs) && defined(ns32000)
175 gcvt(str->str_u.str_nval,20,s);
178 if (str->str_u.str_nval == 0.0)
182 (void)sprintf(s,"%.20g",str->str_u.str_nval);
192 if (str == &str_undef)
195 warn("Use of uninitialized variable");
200 str->str_cur = s - str->str_ptr;
204 fprintf(stderr,"0x%lx ptr(%s)\n",str,str->str_ptr);
215 if (str->str_state == SS_INCR)
216 Str_Grow(str,0); /* just force copy down */
217 str->str_state = SS_NORM;
218 if (str->str_len && str->str_pok)
219 str->str_u.str_nval = atof(str->str_ptr);
221 if (str == &str_undef)
224 warn("Use of uninitialized variable");
225 str->str_u.str_nval = 0.0;
230 fprintf(stderr,"0x%lx num(%g)\n",str,str->str_u.str_nval);
232 return str->str_u.str_nval;
241 tainted |= sstr->str_tainted;
243 if (sstr == dstr || dstr == &str_undef)
246 dstr->str_pok = dstr->str_nok = 0;
247 else if (sstr->str_pok) {
248 str_nset(dstr,sstr->str_ptr,sstr->str_cur);
250 dstr->str_u.str_nval = sstr->str_u.str_nval;
252 dstr->str_state = SS_NORM;
254 else if (sstr->str_cur == sizeof(STBP)) {
255 char *tmps = sstr->str_ptr;
257 if (*tmps == 'S' && bcmp(tmps,"StB",4) == 0) {
258 if (!dstr->str_magic) {
259 dstr->str_magic = str_smake(sstr->str_magic);
260 dstr->str_magic->str_rare = 'X';
265 else if (sstr->str_nok)
266 str_numset(dstr,sstr->str_u.str_nval);
268 if (dstr->str_state == SS_INCR)
269 Str_Grow(dstr,0); /* just force copy down */
272 dstr->str_u = sstr->str_u;
274 dstr->str_u.str_nval = sstr->str_u.str_nval;
276 dstr->str_pok = dstr->str_nok = 0;
280 str_nset(str,ptr,len)
285 if (str == &str_undef)
287 STR_GROW(str, len + 1);
289 (void)bcopy(ptr,str->str_ptr,len);
291 *(str->str_ptr+str->str_cur) = '\0';
292 str->str_nok = 0; /* invalidate number */
293 str->str_pok = 1; /* validate pointer */
295 str->str_tainted = tainted;
305 if (str == &str_undef)
310 STR_GROW(str, len + 1);
311 (void)bcopy(ptr,str->str_ptr,len+1);
313 str->str_nok = 0; /* invalidate number */
314 str->str_pok = 1; /* validate pointer */
316 str->str_tainted = tainted;
320 str_chop(str,ptr) /* like set but assuming ptr is in str */
324 register STRLEN delta;
327 fatal("str_chop: internal inconsistency");
328 delta = ptr - str->str_ptr;
329 str->str_len -= delta;
330 str->str_cur -= delta;
331 str->str_ptr += delta;
332 if (str->str_state == SS_INCR)
333 str->str_u.str_useful += delta;
335 str->str_u.str_useful = delta;
336 str->str_state = SS_INCR;
338 str->str_nok = 0; /* invalidate number */
339 str->str_pok = 1; /* validate pointer (and unstudy str) */
342 str_ncat(str,ptr,len)
347 if (str == &str_undef)
351 STR_GROW(str, str->str_cur + len + 1);
352 (void)bcopy(ptr,str->str_ptr+str->str_cur,len);
354 *(str->str_ptr+str->str_cur) = '\0';
355 str->str_nok = 0; /* invalidate number */
356 str->str_pok = 1; /* validate pointer */
358 str->str_tainted |= tainted;
367 tainted |= sstr->str_tainted;
371 if (!(sstr->str_pok))
372 (void)str_2ptr(sstr);
374 str_ncat(dstr,sstr->str_ptr,sstr->str_cur);
383 if (str == &str_undef)
390 STR_GROW(str, str->str_cur + len + 1);
391 (void)bcopy(ptr,str->str_ptr+str->str_cur,len+1);
393 str->str_nok = 0; /* invalidate number */
394 str->str_pok = 1; /* validate pointer */
396 str->str_tainted |= tainted;
401 str_append_till(str,from,fromend,delim,keeplist)
404 register char *fromend;
411 if (str == &str_undef)
415 len = fromend - from;
416 STR_GROW(str, str->str_cur + len + 1);
417 str->str_nok = 0; /* invalidate number */
418 str->str_pok = 1; /* validate pointer */
419 to = str->str_ptr+str->str_cur;
420 for (; from < fromend; from++,to++) {
421 if (*from == '\\' && from+1 < fromend && delim != '\\') {
423 if (from[1] == delim || from[1] == '\\')
428 else if (from[1] && index(keeplist,from[1]))
433 else if (*from == delim)
438 str->str_cur = to - str->str_ptr;
455 freestrroot = str->str_magic;
456 str->str_magic = Nullstr;
457 str->str_state = SS_NORM;
460 Newz(700+x,str,1,STR);
463 STR_GROW(str, len + 1);
468 str_magic(str, stab, how, name, namlen)
475 if (str == &str_undef || str->str_magic)
477 str->str_magic = Str_new(75,namlen);
478 str = str->str_magic;
479 str->str_u.str_stab = stab;
482 str_nset(str,name,namlen);
486 str_insert(bigstr,offset,len,little,littlelen)
495 register char *midend;
496 register char *bigend;
499 if (bigstr == &str_undef)
502 bigstr->str_pok = SP_VALID; /* disable possible screamer */
505 if (i > 0) { /* string might grow */
506 STR_GROW(bigstr, bigstr->str_cur + i + 1);
507 big = bigstr->str_ptr;
508 mid = big + offset + len;
509 midend = bigend = big + bigstr->str_cur;
512 while (midend > mid) /* shove everything down */
513 *--bigend = *--midend;
514 (void)bcopy(little,big+offset,littlelen);
515 bigstr->str_cur += i;
519 (void)bcopy(little,bigstr->str_ptr+offset,len);
523 big = bigstr->str_ptr;
526 bigend = big + bigstr->str_cur;
529 fatal("panic: str_insert");
531 if (mid - big > bigend - midend) { /* faster to shorten from end */
533 (void)bcopy(little, mid, littlelen);
538 (void)bcopy(midend, mid, i);
542 bigstr->str_cur = mid - big;
544 else if (i = mid - big) { /* faster from front */
547 str_chop(bigstr,midend-i);
552 (void)bcopy(little, mid, littlelen);
554 else if (littlelen) {
556 str_chop(bigstr,midend);
557 (void)bcopy(little,midend,littlelen);
560 str_chop(bigstr,midend);
565 /* make str point to what nstr did */
568 str_replace(str,nstr)
572 if (str == &str_undef)
574 if (str->str_state == SS_INCR)
575 Str_Grow(str,0); /* just force copy down */
576 if (nstr->str_state == SS_INCR)
579 Safefree(str->str_ptr);
580 str->str_ptr = nstr->str_ptr;
581 str->str_len = nstr->str_len;
582 str->str_cur = nstr->str_cur;
583 str->str_pok = nstr->str_pok;
584 str->str_nok = nstr->str_nok;
586 str->str_u = nstr->str_u;
588 str->str_u.str_nval = nstr->str_u.str_nval;
591 str->str_tainted = nstr->str_tainted;
600 if (!str || str == &str_undef)
602 if (str->str_state) {
603 if (str->str_state == SS_FREE) /* already freed */
605 if (str->str_state == SS_INCR && !(str->str_pok & 2)) {
606 str->str_ptr -= str->str_u.str_useful;
607 str->str_len += str->str_u.str_useful;
611 str_free(str->str_magic);
614 Safefree(str->str_ptr);
615 if ((str->str_pok & SP_INTRP) && str->str_u.str_args)
616 arg_free(str->str_u.str_args);
620 if (str->str_len > 127) { /* next user not likely to want more */
621 Safefree(str->str_ptr); /* so give it back to malloc */
622 str->str_ptr = Nullch;
626 str->str_ptr[0] = '\0';
628 if ((str->str_pok & SP_INTRP) && str->str_u.str_args)
629 arg_free(str->str_u.str_args);
633 str->str_state = SS_FREE;
635 str->str_tainted = 0;
637 str->str_magic = freestrroot;
639 #endif /* LEAKTEST */
660 if (!str1 || str1 == &str_undef)
661 return (str2 == Nullstr || str2 == &str_undef || !str2->str_cur);
662 if (!str2 || str2 == &str_undef)
663 return !str1->str_cur;
666 (void)str_2ptr(str1);
668 (void)str_2ptr(str2);
670 if (str1->str_cur != str2->str_cur)
673 return !bcmp(str1->str_ptr, str2->str_ptr, str1->str_cur);
682 if (!str1 || str1 == &str_undef)
683 return (str2 == Nullstr || str2 == &str_undef || !str2->str_cur)?0:-1;
684 if (!str2 || str2 == &str_undef)
685 return str1->str_cur != 0;
688 (void)str_2ptr(str1);
690 (void)str_2ptr(str2);
692 if (str1->str_cur < str2->str_cur) {
693 if (retval = memcmp(str1->str_ptr, str2->str_ptr, str1->str_cur))
698 else if (retval = memcmp(str1->str_ptr, str2->str_ptr, str2->str_cur))
700 else if (str1->str_cur == str2->str_cur)
707 str_gets(str,fp,append)
712 register char *bp; /* we're going to steal some values */
713 register int cnt; /* from the stdio struct and put EVERYTHING */
714 register STDCHAR *ptr; /* in the innermost loop into registers */
715 register int newline = record_separator;/* (assuming >= 6 registers) */
719 register int get_paragraph;
720 register char *oldbp;
722 if (str == &str_undef)
724 if (get_paragraph = !rslen) { /* yes, that's an assignment */
726 oldbp = Nullch; /* remember last \n position (none) */
728 #ifdef STDSTDIO /* Here is some breathtakingly efficient cheating */
729 cnt = fp->_cnt; /* get count into register */
730 str->str_nok = 0; /* invalidate number */
731 str->str_pok = 1; /* validate pointer */
732 if (str->str_len <= cnt + 1) /* make sure we have the room */
733 STR_GROW(str, append+cnt+2); /* (remembering cnt can be -1) */
734 bp = str->str_ptr + append; /* move these two too to registers */
738 while (--cnt >= 0) { /* this */ /* eat */
739 if ((*bp++ = *ptr++) == newline) /* really */ /* dust */
740 goto thats_all_folks; /* screams */ /* sed :-) */
743 fp->_cnt = cnt; /* deregisterize cnt and ptr */
745 i = _filbuf(fp); /* get more characters */
747 ptr = fp->_ptr; /* reregisterize cnt and ptr */
749 bpx = bp - str->str_ptr; /* prepare for possible relocation */
750 if (get_paragraph && oldbp)
751 obpx = oldbp - str->str_ptr;
753 STR_GROW(str, bpx + cnt + 2);
754 bp = str->str_ptr + bpx; /* reconstitute our pointer */
755 if (get_paragraph && oldbp)
756 oldbp = str->str_ptr + obpx;
758 if (i == newline) { /* all done for now? */
760 goto thats_all_folks;
762 else if (i == EOF) /* all done for ever? */
763 goto thats_really_all_folks;
764 *bp++ = i; /* now go back to screaming loop */
768 if (get_paragraph && bp - 1 != oldbp) {
769 oldbp = bp; /* remember where this newline was */
770 goto screamer; /* and go back to the fray */
772 thats_really_all_folks:
773 fp->_cnt = cnt; /* put these back or we're in trouble */
776 str->str_cur = bp - str->str_ptr; /* set length */
778 #else /* !STDSTDIO */ /* The big, slow, and stupid way */
781 static char buf[8192];
782 char * bpe = buf + sizeof(buf) - 3;
787 while ((i = getc(fp)) != EOF && (*bp++ = i) != newline && bp < bpe);
788 if (i == newline && get_paragraph &&
789 (i = getc(fp)) != EOF && (*bp++ = i) != newline && bp < bpe)
797 if (i != newline && i != EOF) {
803 #endif /* STDSTDIO */
805 return str->str_cur - append ? str->str_ptr : Nullch;
814 CMD *oldcurcmd = curcmd;
815 int oldperldb = perldb;
819 str_sset(linestr,str);
821 oldoldbufptr = oldbufptr = bufptr = str_get(linestr);
822 bufend = bufptr + linestr->str_cur;
823 if (++loop_ptr >= loop_max) {
825 Renew(loop_stack, loop_max, struct loop);
827 loop_stack[loop_ptr].loop_label = "_EVAL_";
828 loop_stack[loop_ptr].loop_sp = 0;
831 deb("(Pushing label #%d _EVAL_)\n", loop_ptr);
834 if (setjmp(loop_stack[loop_ptr].loop_env)) {
838 fatal("%s\n",stab_val(stabent("@",TRUE))->str_ptr);
842 char *tmps = loop_stack[loop_ptr].loop_label;
843 deb("(Popping label #%d %s)\n",loop_ptr,
850 curcmd->c_line = oldcurcmd->c_line;
855 if (retval || error_count)
856 fatal("Invalid component in string or format");
859 if (cmd->c_type != C_EXPR || cmd->c_next || arg->arg_type != O_LIST)
860 fatal("panic: error in parselist %d %x %d", cmd->c_type,
861 cmd->c_next, arg ? arg->arg_type : -1);
870 register char *s = str_get(src);
871 register char *send = s + src->str_cur;
876 register int brackets;
881 toparse = Str_new(76,0);
885 str_nset(toparse,"",0);
888 if (*s == '\\' && s[1] && index("$@[{\\]}",s[1])) {
889 str_ncat(str, t, s - t);
891 if (*nointrp && s+1 < send)
892 if (*s != '@' && (*s != '$' || index(nointrp,s[1])))
894 str_ncat(str, "$b", 2);
899 else if ((*s == '@' || (*s == '$' && !index(nointrp,s[1]))) &&
903 if (*s == '$' && s[1] == '#' && (isalpha(s[2]) || s[2] == '_'))
905 s = scanreg(s,send,tokenbuf);
907 (!(stab = stabent(tokenbuf,FALSE)) ||
908 (*s == '{' ? !stab_xhash(stab) : !stab_xarray(stab)) )) {
911 continue; /* grandfather @ from old scripts */
913 str_ncat(str,"$a",2);
914 str_ncat(toparse,",",1);
915 if (t[1] != '{' && (*s == '[' || *s == '{' /* }} */ ) &&
916 (stab = stabent(tokenbuf,FALSE)) &&
917 ((*s == '[') ? (stab_xarray(stab) != 0) : (stab_xhash(stab) != 0)) ) {
939 s = cpytill(tokenbuf,s+1,send,*s,&len);
941 fatal("Unterminated string");
946 } while (brackets > 0 && s < send);
948 fatal("Unmatched brackets in string");
949 if (*nointrp) { /* we're in a regular expression */
951 if (*d == '{' && s[-1] == '}') { /* maybe {n,m} */
953 if (isdigit(*d)) { /* matches /^{\d,?\d*}$/ */
959 s = checkpoint; /* Is {n,m}! Backoff! */
962 else if (*d == '[' && s[-1] == ']') { /* char class? */
963 int weight = 2; /* let's weigh the evidence */
965 unsigned char un_char = 0, last_un_char;
971 else if (d[1] == '$')
975 if (isdigit(d[2]) && !d[3])
981 for (d++; d < s; d++) {
982 last_un_char = un_char;
983 un_char = (unsigned char)*d;
987 weight -= seen[un_char] * 10;
988 if (isalpha(d[1]) || isdigit(d[1]) ||
990 d = scanreg(d,s,tokenbuf);
991 if (stabent(tokenbuf,FALSE))
996 else if (*d == '$' && d[1] &&
997 index("[#!%*<>()-=",d[1])) {
998 if (!d[2] || /*{*/ index("])} =",d[2]))
1007 if (index("wds",d[1]))
1009 else if (seen['\''] || seen['"'])
1011 else if (index("rnftb",d[1]))
1013 else if (isdigit(d[1])) {
1015 while (d[1] && isdigit(d[1]))
1023 if (last_un_char < (unsigned char) d[1]
1025 if (index("aA01! ",last_un_char))
1027 if (index("zZ79~",d[1]))
1033 if (isalpha(*d) && d[1] && isalpha(d[1])) {
1035 if (yylex() != WORD)
1039 if (un_char == last_un_char + 1)
1041 weight -= seen[un_char];
1048 fprintf(stderr,"[%s] weight %d\n",
1049 checkpoint+1,weight);
1052 if (weight >= 0) /* probably a character class */
1058 str_ncat(toparse, "join($\",", 8);
1059 if (t[1] == '{' && s[-1] == '}') {
1060 str_ncat(toparse, t, 1);
1061 str_ncat(toparse, t+2, s - t - 3);
1064 str_ncat(toparse, t, s - t);
1066 str_ncat(toparse, ")", 1);
1072 str_ncat(str,t,s-t);
1073 if (toparse->str_ptr && *toparse->str_ptr == ',') {
1074 *toparse->str_ptr = '(';
1075 str_ncat(toparse,",$$);",5);
1076 str->str_u.str_args = parselist(toparse);
1077 str->str_u.str_args->arg_len--; /* ignore $$ reference */
1080 str->str_u.str_args = Nullarg;
1082 str->str_pok |= SP_INTRP;
1084 str_replace(src,str);
1095 register char *send;
1096 register STR **elem;
1098 if (str == &str_undef)
1100 if (!(src->str_pok & SP_INTRP)) {
1101 int oldsave = savestack->ary_fill;
1103 (void)savehptr(&curstash);
1104 curstash = curcmd->c_stash; /* so stabent knows right package */
1106 restorelist(oldsave);
1108 s = src->str_ptr; /* assumed valid since str_pok set */
1110 send = s + src->str_cur;
1112 if (src->str_u.str_args) {
1113 (void)eval(src->str_u.str_args,G_ARRAY,sp);
1114 /* Assuming we have correct # of args */
1115 elem = stack->ary_array + sp;
1120 if (*s == '$' && s+1 < send) {
1121 str_ncat(str,t,s-t);
1124 str_scat(str,*++elem);
1127 str_ncat(str,++s,1);
1135 str_ncat(str,t,s-t);
1145 if (!str || str == &str_undef)
1148 str->str_u.str_nval += 1.0;
1152 if (!str->str_pok || !*str->str_ptr) {
1153 str->str_u.str_nval = 1.0;
1159 while (isalpha(*d)) d++;
1160 while (isdigit(*d)) d++;
1162 str_numset(str,atof(str->str_ptr) + 1.0); /* punt */
1166 while (d >= str->str_ptr) {
1176 *(d--) -= 'z' - 'a' + 1;
1179 /* oh,oh, the number grew */
1180 STR_GROW(str, str->str_cur + 2);
1182 for (d = str->str_ptr + str->str_cur; d > str->str_ptr; d--)
1194 if (!str || str == &str_undef)
1197 str->str_u.str_nval -= 1.0;
1201 if (!str->str_pok) {
1202 str->str_u.str_nval = -1.0;
1206 str_numset(str,atof(str->str_ptr) - 1.0);
1209 /* Make a string that will exist for the duration of the expression
1210 * evaluation. Actually, it may have to last longer than that, but
1211 * hopefully cmd_exec won't free it until it has been assigned to a
1212 * permanent location. */
1214 static long tmps_size = -1;
1220 register STR *str = Str_new(78,0);
1222 str_sset(str,oldstr);
1223 if (++tmps_max > tmps_size) {
1224 tmps_size = tmps_max;
1225 if (!(tmps_size & 127)) {
1227 Renew(tmps_list, tmps_size + 128, STR*);
1229 New(702,tmps_list, 128, STR*);
1232 tmps_list[tmps_max] = str;
1236 /* same thing without the copying */
1242 if (str == &str_undef)
1244 if (++tmps_max > tmps_size) {
1245 tmps_size = tmps_max;
1246 if (!(tmps_size & 127)) {
1248 Renew(tmps_list, tmps_size + 128, STR*);
1250 New(704,tmps_list, 128, STR*);
1253 tmps_list[tmps_max] = str;
1262 register STR *str = Str_new(79,0);
1266 str_nset(str,s,len);
1274 register STR *str = Str_new(80,0);
1280 /* make an exact duplicate of old */
1286 register STR *new = Str_new(81,0);
1290 if (old->str_state == SS_FREE) {
1291 warn("semi-panic: attempt to dup freed string");
1294 if (old->str_state == SS_INCR && !(old->str_pok & 2))
1297 Safefree(new->str_ptr);
1298 Copy(old,new,1,STR);
1300 new->str_ptr = nsavestr(old->str_ptr,old->str_len);
1308 register HENT *entry;
1309 register STAB *stab;
1312 register SPAT *spat;
1315 if (!*s) { /* reset ?? searches */
1316 for (spat = stash->tbl_spatroot;
1318 spat = spat->spat_next) {
1319 spat->spat_flags &= ~SPAT_USED;
1324 /* reset variables */
1326 if (!stash->tbl_array)
1334 for ( ; i <= max; i++) {
1335 for (entry = stash->tbl_array[i];
1337 entry = entry->hent_next) {
1338 stab = (STAB*)entry->hent_val;
1339 str = stab_val(stab);
1343 str->str_tainted = tainted;
1345 if (str->str_ptr != Nullch)
1346 str->str_ptr[0] = '\0';
1347 if (stab_xarray(stab)) {
1348 aclear(stab_xarray(stab));
1350 if (stab_xhash(stab)) {
1351 hclear(stab_xhash(stab), FALSE);
1352 if (stab == envstab)
1353 environ[0] = Nullch;
1366 fprintf(stderr,"%s %d %d %d\n",s,tainted,uid, euid);
1368 if (tainted && (!euid || euid != uid || egid != gid)) {
1378 register STR *envstr;
1380 envstr = hfetch(stab_hash(envstab),"PATH",4,FALSE);
1381 if (envstr == &str_undef || envstr->str_tainted) {
1383 if (envstr->str_tainted == 2)
1384 taintproper("Insecure directory in PATH");
1386 taintproper("Insecure PATH");
1388 envstr = hfetch(stab_hash(envstab),"IFS",3,FALSE);
1389 if (envstr != &str_undef && envstr->str_tainted) {
1391 taintproper("Insecure IFS");