root/usr/src/tools/smatch/src/check_proc_create.c
/*
 * Copyright (C) 2010 Dan Carpenter.
 *
 * This program is free software; you can redistribute it and/or
 * modify it under the terms of the GNU General Public License
 * as published by the Free Software Foundation; either version 2
 * of the License, or (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, see http://www.gnu.org/copyleft/gpl.txt
 */

#include "smatch.h"

static int my_id;

static struct {
        int name_param;
        int mode_param;
} param_index[] = {
        {.name_param = 0, .mode_param = 1},
        {.name_param = 1, .mode_param = 2},
};

#define S_IWOTH 00002

static void match_create(const char *fn, struct expression *expr, void *_param_type)
{
        struct expression *arg_expr;
        sval_t sval;
        char *name;
        int idx = PTR_INT(_param_type);

        arg_expr = get_argument_from_call_expr(expr->args, param_index[idx].mode_param);
        if (!get_implied_value(arg_expr, &sval))
                return;
        if (!(sval.uvalue & S_IWOTH))
                return;
        arg_expr = get_argument_from_call_expr(expr->args, param_index[idx].name_param);
        name = expr_to_var(arg_expr);
        sm_warning("proc file '%s' is world writable", name);
        free_string(name);
}

void check_proc_create(int id)
{
        my_id = id;
        if (option_project != PROJ_KERNEL)
                return;

        add_function_hook("proc_create", &match_create, INT_PTR(0));
        add_function_hook("create_proc_entry", &match_create, INT_PTR(0));
        add_function_hook("proc_create_data", &match_create, INT_PTR(0));
        add_function_hook("proc_net_fops_create", match_create, INT_PTR(1));
}