/home/build/quick-libreswan-2/programs/pluto/plutomain.c

Bug Summary

File:	programs/pluto/plutomain.c
Warning:	line 242, column 6 Null pointer passed to 1st parameter expecting 'nonnull'
Annotated Source Code

Press '?' to see keyboard shortcuts
Show analyzer invocation
clang -cc1 -cc1 -triple x86_64-redhat-linux-gnu -analyze -disable-free -disable-llvm-verifier -discard-value-names -main-file-name plutomain.c -analyzer-store=region -analyzer-opt-analyze-nested-blocks -analyzer-checker=core -analyzer-checker=apiModeling -analyzer-checker=unix -analyzer-checker=deadcode -analyzer-checker=security.insecureAPI.UncheckedReturn -analyzer-checker=security.insecureAPI.getpw -analyzer-checker=security.insecureAPI.gets -analyzer-checker=security.insecureAPI.mktemp -analyzer-checker=security.insecureAPI.mkstemp -analyzer-checker=security.insecureAPI.vfork -analyzer-checker=nullability.NullPassedToNonnull -analyzer-checker=nullability.NullReturnedFromNonnull -analyzer-output plist -w -setup-static-analyzer -mrelocation-model pic -pic-level 2 -pic-is-pie -mframe-pointer=all -relaxed-aliasing -fmath-errno -fno-rounding-math -mconstructor-aliases -munwind-tables -target-cpu x86-64 -tune-cpu generic -debugger-tuning=gdb -fcoverage-compilation-dir=/home/build/quick-libreswan-2/programs/pluto -resource-dir /usr/lib64/clang/13.0.0 -D TimeZoneOffset=timezone -D PIE -D NSS_IPSEC_PROFILE -D XFRM_LIFETIME_DEFAULT=30 -D USE_IKEv1 -D XFRM_SUPPORT -D USE_XFRM_INTERFACE -D USE_DNSSEC -D DEFAULT_DNSSEC_ROOTKEY_FILE="/var/lib/unbound/root.key" -D HAVE_LABELED_IPSEC -D HAVE_SECCOMP -D LIBCURL -D USE_LINUX_AUDIT -D HAVE_NM -D USE_PAM_AUTH -D USE_3DES -D USE_AES -D USE_CAMELLIA -D USE_CHACHA -D USE_DH31 -D USE_MD5 -D USE_SHA1 -D USE_SHA2 -D USE_PRF_AES_XCBC -D USE_NSS_KDF -D DEFAULT_RUNDIR="/run/pluto" -D IPSEC_CONF="/etc/ipsec.conf" -D IPSEC_CONFDDIR="/etc/ipsec.d" -D IPSEC_NSSDIR="/var/lib/ipsec/nss" -D IPSEC_CONFDIR="/etc" -D IPSEC_EXECDIR="/usr/local/libexec/ipsec" -D IPSEC_SBINDIR="/usr/local/sbin" -D IPSEC_VARDIR="/var" -D POLICYGROUPSDIR="/etc/ipsec.d/policies" -D IPSEC_SECRETS_FILE="/etc/ipsec.secrets" -D FORCE_PR_ASSERT -D USE_FORK=1 -D USE_VFORK=0 -D USE_DAEMON=0 -D USE_PTHREAD_SETSCHEDPRIO=1 -D GCC_LINT -D HAVE_LIBCAP_NG -I . -I ../../OBJ.linux.x86_64/programs/pluto -I ../../include -I /usr/include/nss3 -I /usr/include/nspr4 -I /home/build/quick-libreswan-2/programs/pluto/linux-copy -D HERE_FILENAME="programs/pluto/plutomain.c" -internal-isystem /usr/lib64/clang/13.0.0/include -internal-isystem /usr/local/include -internal-isystem /usr/bin/../lib/gcc/x86_64-redhat-linux/11/../../../../x86_64-redhat-linux/include -internal-externc-isystem /include -internal-externc-isystem /usr/include -std=gnu99 -fdebug-compilation-dir=/home/build/quick-libreswan-2/programs/pluto -ferror-limit 19 -stack-protector 3 -fgnuc-version=4.2.1 -analyzer-output=html -faddrsig -D__GCC_HAVE_DWARF2_CFI_ASM=1 -o /tmp/scan-build-2022-01-01-205714-1273399-1 -x c /home/build/quick-libreswan-2/programs/pluto/plutomain.c
1/*
* Pluto main program
*
* Copyright (C) 1997      Angelos D. Keromytis.
* Copyright (C) 1998-2001,2013 D. Hugh Redelmeier <hugh@mimosa.com>
* Copyright (C) 2003-2008 Michael C Richardson <mcr@xelerance.com>
* Copyright (C) 2003-2010 Paul Wouters <paul@xelerance.com>
* Copyright (C) 2007 Ken Bantoft <ken@xelerance.com>
* Copyright (C) 2008-2009 David McCullough <david_mccullough@securecomputing.com>
* Copyright (C) 2009 Avesh Agarwal <avagarwa@redhat.com>
* Copyright (C) 2009-2016 Tuomo Soini <tis@foobar.fi>
* Copyright (C) 2012-2019 Paul Wouters <pwouters@redhat.com>
* Copyright (C) 2012-2016 Paul Wouters <paul@libreswan.org>
* Copyright (C) 2012 Kim B. Heino <b@bbbs.net>
* Copyright (C) 2012 Philippe Vouters <Philippe.Vouters@laposte.net>
* Copyright (C) 2012 Wes Hardaker <opensource@hardakers.net>
* Copyright (C) 2013 David McCullough <ucdevel@gmail.com>
* Copyright (C) 2016-2019 Andrew Cagney <cagney@gnu.org>
* Copyright (C) 2017 Mayank Totale <mtotale@gmail.com>
*
* This program is free software; you can redistribute it and/or modify it
* under the terms of the GNU General Public License as published by the
* Free Software Foundation; either version 2 of the License, or (at your
* option) any later version.  See <https://www.gnu.org/licenses/gpl2.txt>.
*
* This program is distributed in the hope that it will be useful, but
* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
* or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
* for more details.
*/

32#include <pthread.h> /* Must be the first include file */
33#include <stdio.h>
34#include <stdlib.h>
35#include <errno(*__errno_location ()).h>
36#include <sys/types.h>
37#include <sys/stat.h>
38#include <sys/un.h>
39#include <fcntl.h>
40#include <getopt.h>
41#include <unistd.h>	/* for unlink(), write(), close(), access(), et.al. */

43#include "lswconf.h"
44#include "lswfips.h"
45#include "lswnss.h"
46#include "defs.h"
47#include "nss_ocsp.h"
48#include "server_fork.h"		/* for init_server_fork() */
49#include "server.h"
50#include "kernel.h"	/* needs connections.h */
51#include "log.h"
52#include "keys.h"
53#include "secrets.h"    /* for free_remembered_public_keys() */
54#include "rnd.h"
55#include "fetch.h"
56#include "ipsecconf/confread.h"
57#include "crypto.h"
58#include "vendor.h"
59#include "enum_names.h"
60#include "virtual_ip.h"
61#include "state_db.h"		/* for init_state_db() */
62#include "revival.h"		/* for init_revival() */
63#include "connection_db.h"	/* for connection_state_db() */
64#include "nat_traversal.h"
65#include "ike_alg.h"
66#include "ikev2_redirect.h"
67#include "root_certs.h"		/* for init_root_certs() */
68#include "host_pair.h"		/* for init_host_pair() */
69#include "ikev1.h"		/* for init_ikev1() */
70#include "ikev2.h"		/* for init_ikev2() */
71#include "crypt_symkey.h"	/* for init_crypt_symkey() */
72#include "crl_queue.h"		/* for free_crl_queue() */
73#include "iface.h"
74#include "server_pool.h"

76#ifndef IPSECDIR"/etc/ipsec.d"
77#define IPSECDIR"/etc/ipsec.d" "/etc/ipsec.d"
78#endif

80#ifdef HAVE_LIBCAP_NG1
81# include <cap-ng.h>	/* from libcap-ng devel */
82#endif

84#include "labeled_ipsec.h"		/* for init_labeled_ipsec() */

86# include "pluto_sd.h"		/* for pluto_sd_init() */

88#ifdef USE_DNSSEC1
89#include "dnssec.h"
90#endif

92#ifdef HAVE_SECCOMP1
93#include "pluto_seccomp.h"
94#endif

96static void fatal_opt(int longindex, struct logger *logger, const char *fmt, ...) PRINTF_LIKE(3)__attribute__ ((format(printf, 3, 3 + 1))) NEVER_RETURNS__attribute__ ((noreturn));

98static const char *pluto_name;	/* name (path) we were invoked with */

100static pthread_t main_thread;

102bool_Bool in_main_thread(void)
103{
return pthread_equal(pthread_self(), main_thread);
105}

107static char *rundir = NULL((void*)0);
108char *pluto_listen = NULL((void*)0);
109static bool_Bool fork_desired = USE_FORK1 || USE_DAEMON0;
110static bool_Bool selftest_only = false0;

112#ifdef FIPS_CHECK
113# include <fipscheck.h> /* from fipscheck devel */
114static const char *fips_package_files[] = { IPSEC_EXECDIR"/usr/local/libexec/ipsec" "/pluto", NULL((void*)0) };
115#endif

117/* pulled from main for show_setup_plutomain() */
118static const struct lsw_conf_options *oco;
119static char *coredir;
120static char *conffile;
121static int pluto_nss_seedbits;
122static int nhelpers = -1;
123static bool_Bool do_dnssec = false0;
124static char *pluto_dnssec_rootfile = NULL((void*)0);
125static char *pluto_dnssec_trusted = NULL((void*)0);

127static char *ocsp_uri = NULL((void*)0);
128static char *ocsp_trust_name = NULL((void*)0);
129static int ocsp_timeout = OCSP_DEFAULT_TIMEOUT2;
130static int ocsp_method = OCSP_METHOD_GET;
131static int ocsp_cache_size = OCSP_DEFAULT_CACHE_SIZE1000;
132static int ocsp_cache_min_age = OCSP_DEFAULT_CACHE_MIN_AGE3600;
133static int ocsp_cache_max_age = OCSP_DEFAULT_CACHE_MAX_AGE24 * 3600;

135static char *pluto_lock_filename = NULL((void*)0);
136static bool_Bool pluto_lock_created = false0;

138void free_pluto_main(void)
139{
/* Some values can be NULL if not specified as pluto argument */
pfree(pluto_lock_filename);
pfree(coredir);
pfree(conffile);
pfreeany(pluto_stats_binary){ typeof(pluto_stats_binary) *pp_ = &(pluto_stats_binary)
; if (*pp_ != ((void*)0)) { pfree(*pp_); *pp_ = ((void*)0); }
 };
pfreeany(pluto_listen){ typeof(pluto_listen) *pp_ = &(pluto_listen); if (*pp_ !=
 ((void*)0)) { pfree(*pp_); *pp_ = ((void*)0); } };
pfree(pluto_vendorid);
pfreeany(ocsp_uri){ typeof(ocsp_uri) *pp_ = &(ocsp_uri); if (*pp_ != ((void
*)0)) { pfree(*pp_); *pp_ = ((void*)0); } };
pfreeany(ocsp_trust_name){ typeof(ocsp_trust_name) *pp_ = &(ocsp_trust_name); if (
*pp_ != ((void*)0)) { pfree(*pp_); *pp_ = ((void*)0); } };
pfreeany(curl_iface){ typeof(curl_iface) *pp_ = &(curl_iface); if (*pp_ != ((
void*)0)) { pfree(*pp_); *pp_ = ((void*)0); } };
pfreeany(pluto_log_file){ typeof(pluto_log_file) *pp_ = &(pluto_log_file); if (*pp_
 != ((void*)0)) { pfree(*pp_); *pp_ = ((void*)0); } };
pfreeany(pluto_dnssec_rootfile){ typeof(pluto_dnssec_rootfile) *pp_ = &(pluto_dnssec_rootfile
); if (*pp_ != ((void*)0)) { pfree(*pp_); *pp_ = ((void*)0); }
 };
pfreeany(pluto_dnssec_trusted){ typeof(pluto_dnssec_trusted) *pp_ = &(pluto_dnssec_trusted
); if (*pp_ != ((void*)0)) { pfree(*pp_); *pp_ = ((void*)0); }
 };
pfreeany(rundir){ typeof(rundir) *pp_ = &(rundir); if (*pp_ != ((void*)0)
) { pfree(*pp_); *pp_ = ((void*)0); } };
free_global_redirect_dests();
155}

157/* string naming compile-time options that have interop implications */
158static const char compile_time_interop_options[] = ""
" IKEv2"
160#ifdef USE_IKEv11
" IKEv1"
162#endif
163#ifdef XFRM_SUPPORT1
" XFRM"
165#endif
166#ifdef USE_XFRM_INTERFACE1
" XFRMI"
168#endif
" esp-hw-offload"
170#if USE_FORK1
" FORK"
172#endif
173#if USE_VFORK0
" VFORK"
175#endif
176#if USE_DAEMON0
" DAEMON"
178#endif
179#if USE_PTHREAD_SETSCHEDPRIO1
" PTHREAD_SETSCHEDPRIO"
181#endif
182#if defined __GNUC__4 && defined __EXCEPTIONS
" GCC_EXCEPTIONS"
184#endif
185#ifdef HAVE_BROKEN_POPEN
" BROKEN_POPEN"
187#endif
" NSS"
189#ifdef NSS_REQ_AVA_COPY
" (AVA copy)"
191#endif
192#ifdef NSS_IPSEC_PROFILE1
" (IPsec profile)"
194#endif
195#ifdef USE_NSS_KDF1
" (NSS-PRF)"
197#else
" (native-PRF)"
199#endif
200#ifdef USE_DNSSEC1
" DNSSEC"
202#endif
203#ifdef USE_SYSTEMD_WATCHDOG
" SYSTEMD_WATCHDOG"
205#endif
206#ifdef FIPS_CHECK
" FIPS_BINCHECK"
208#endif
209#ifdef HAVE_LABELED_IPSEC1
" LABELED_IPSEC"
" (SELINUX)"
212#endif
213#ifdef HAVE_SECCOMP1
" SECCOMP"
215#endif
216#ifdef HAVE_LIBCAP_NG1
" LIBCAP_NG"
218#endif
219#ifdef USE_LINUX_AUDIT1
" LINUX_AUDIT"
221#endif
222#ifdef USE_PAM_AUTH1
" AUTH_PAM"
224#endif
225#ifdef HAVE_NM1
" NETWORKMANAGER"
227#endif
228#ifdef LIBCURL1
" CURL(non-NSS)"
230#endif
231#ifdef LIBLDAP
" LDAP(non-NSS)"
233#endif
234#ifdef USE_EFENCE
" EFENCE"
236#endif
237;

239/* create lockfile, or die in the attempt */
240static int create_lock(struct logger *logger)
241{
if (mkdir(rundir, 0755) != 0) {
21
←
Null pointer passed to 1st parameter expecting 'nonnull'
if (errno(*__errno_location ()) != EEXIST17) {
	fatal_errno(PLUTO_EXIT_LOCK_FAIL, logger, errno(*__errno_location ()),
		    "unable to create lock dir: \"%s\"", rundir);
}
}

unsigned attempt;
for (attempt = 0; attempt < 2; attempt++) {
int fd = open(pluto_lock_filename, O_WRONLY01 | O_CREAT0100 | O_EXCL0200 | O_TRUNC01000,
	      S_IRUSR0400 | S_IRGRP(0400 >> 3) | S_IROTH((0400 >> 3) >> 3));
if (fd >= 0) {
	pluto_lock_created = true1;
	return fd;
}
if (errno(*__errno_location ()) != EEXIST17) {
	fatal_errno(PLUTO_EXIT_LOCK_FAIL, logger, errno(*__errno_location ()),
		    "unable to create lock file \"%s\"", pluto_lock_filename);
}
if (fork_desired) {
	fatal(PLUTO_EXIT_LOCK_FAIL, logger,
	      "lock file \"%s\" already exists", pluto_lock_filename);
}
/*
 * if we did not fork, then we don't really need the pid to
 * control, so wipe it
 */
if (unlink(pluto_lock_filename) == -1) {
	fatal_errno(PLUTO_EXIT_LOCK_FAIL, logger, errno(*__errno_location ()),
		    "lock file \"%s\" already exists and could not be removed",
		    pluto_lock_filename);
}
/*
 * lock file removed, try creating it
 * again ...
 */
}
fatal(PLUTO_EXIT_LOCK_FAIL, logger, "lock file \"%s\" could not be created after %u attempts",
     pluto_lock_filename, attempt);
281}

283/*
* fill_lock - Populate the lock file with pluto's PID
*
* @param lockfd File Descriptor for the lock file
* @param pid PID (pid_t struct) to be put into the lock file
* @return bool True if successful
*/
290static bool_Bool fill_lock(int lockfd, pid_t pid)
291{
char buf[30];	/* holds "<pid>\n" */
int len = snprintf(buf, sizeof(buf), "%u\n", (unsigned int) pid);
bool_Bool ok = len > 0 && write(lockfd, buf, len) == len;

close(lockfd);
return ok;
298}

300/*
* delete_lock - Delete the lock file
*/
303void delete_lock(void)
304{
if (pluto_lock_created) {
delete_ctl_socket();
unlink(pluto_lock_filename);	/* is noting failure useful? */
}
309}

311/*
* parser.l and keywords.c need these global variables
* FIXME: move them to confread_load() parameters
*/
315int verbose = 0;

317/* Read config file. exit() on error. */
318static struct starter_config *read_cfg_file(char *configfile, long longindex, struct logger *logger)
319{
struct starter_config *cfg = NULL((void*)0);
starter_errors_t errl = { NULL((void*)0) };

cfg = confread_load(configfile, &errl, NULL((void*)0) /* ctl_addr.sun_path? */, true1, logger);
if (cfg == NULL((void*)0)) {
/*
 * note: fatal_opt() never returns so we will have a
 * technical leak of errl.errors
 */
fatal_opt(longindex, logger, "%s", errl.errors);
}

if (errl.errors != NULL((void*)0)) {
llog(RC_LOG, logger, "pluto --config '%s', ignoring: %s",
	    configfile, errl.errors);
pfree(errl.errors);
}

return cfg;
339}

341/*
* Helper function for config file mapper: set string option value.
* Values passed in are expected to have been allocated using our
* own functions.
*/
346static void set_cfg_string(char **target, char *value)
347{
/* Do nothing if value is unset. */
if (value == NULL((void*)0) || *value == '\0')
return;

/* Don't free previous target, it might be statically set. */
*target = clone_str(value, "(ignore) set_cfg_string item")((value) == ((void*)0) ? ((void*)0) : clone_bytes((value), strlen
((value)) + 1, ("(ignore) set_cfg_string item")));
354}

356/*
* This function MUST NOT be used for anything else!
* It is used to seed the NSS PRNG based on --seedbits pluto argument
* or the seedbits= * config setup option in ipsec.conf.
* Everything else that needs random MUST use get_rnd_bytes()
* This function MUST NOT be changed to use /dev/urandom.
*/
363static void get_bsi_random(size_t nbytes, unsigned char *buf, struct logger *logger)
364{
size_t ndone;
int dev;
ssize_t got;
const char *device = "/dev/random";

dev = open(device, 0);
if (dev < 0) {
fatal_errno(PLUTO_EXIT_NSS_FAIL, logger, errno(*__errno_location ()),
	    "could not open %s", device);
}

ndone = 0;
dbg("need %d bits random for extra seeding of the NSS PRNG",{ if ((cur_debugging & (((lset_t)1 << (DBG_BASE_IX)
)))) { DBG_log("need %d bits random for extra seeding of the NSS PRNG"
, (int) nbytes * 8); } }
   (int) nbytes * BITS_PER_BYTE){ if ((cur_debugging & (((lset_t)1 << (DBG_BASE_IX)
)))) { DBG_log("need %d bits random for extra seeding of the NSS PRNG"
, (int) nbytes * 8); } };

while (ndone < nbytes) {
got = read(dev, buf + ndone, nbytes - ndone);
if (got < 0) {
	fatal_errno(PLUTO_EXIT_NSS_FAIL, logger, errno(*__errno_location ()),
		    "read error on %s", device);
}
if (got == 0) {
	fatal(PLUTO_EXIT_NSS_FAIL, logger, "EOF on %s!?!\n",  device);
}
ndone += got;
}
close(dev);
dbg("read %zu bytes from /dev/random for NSS PRNG", nbytes){ if ((cur_debugging & (((lset_t)1 << (DBG_BASE_IX)
)))) { DBG_log("read %zu bytes from /dev/random for NSS PRNG"
, nbytes); } };
393}

395static void pluto_init_nss(const char *nssdir, struct logger *logger)
396{
diag_t d = lsw_nss_setup(nssdir, LSW_NSS_READONLY, logger);
if (d != NULL((void*)0)) {
fatal_diag(PLUTO_EXIT_NSS_FAIL, logger, &d, "%s", "");
}
llog(RC_LOG, logger, "NSS crypto library initialized");

/*
* This exists purely to make the BSI happy.
* We do not inflict this on other users
*/
if (pluto_nss_seedbits != 0) {
int seedbytes = BYTES_FOR_BITS(pluto_nss_seedbits)(((pluto_nss_seedbits) + 8 - 1) / 8);
unsigned char *buf = alloc_bytes(seedbytes, "TLA seedmix");

get_bsi_random(seedbytes, buf, logger); /* much TLA, very blocking */
SECStatus rv = PK11_RandomUpdate(buf, seedbytes);
llog(RC_LOG, logger, "seeded %d bytes into the NSS PRNG", seedbytes);
passert(rv == SECSuccess)({ _Bool assertion__ = rv == SECSuccess; if (!assertion__) { where_t
 here = ({ static const struct where here = { .func = __func__
, .file = "programs/pluto/plutomain.c", .line = 414, }; &
here; }); const struct logger *logger_ = &failsafe_logger
; llog_passert(logger_, here, "%s", "rv == SECSuccess"); } (void
) 1; });
messupn(buf, seedbytes)memset((buf), 0xFB, (seedbytes));
pfree(buf);
}
418}

420/* 0 is special and default: do not check crls dynamically */
421deltatime_t crl_check_interval = DELTATIME_INIT(0){ .dt = { .tv_sec = (0), } };

423/*
* Attribute Type "constant" for Security Context
*
* Originally, we assigned the value 10, but that properly belongs to ECN_TUNNEL.
* We then assigned 32001 which is in the private range RFC 2407.
* Unfortunately, we feel we have to support 10 as an option for backward
* compatibility.
* This variable specifies (globally!!) which we support: 10 or 32001.
* That makes migration to 32001 all or nothing.
*/
433uint16_t secctx_attr_type = SECCTX;

435/*
* Table of Pluto command-line options.
*
* For getopt_long(3), but with twists.
*
* We never find that letting getopt set an option makes sense
* so flag is always NULL.
*
* Trick: we split each "name" string with an explicit '\0'.
* Before the '\0' is the option name, as seen by getopt_long.
* After the '\0' is meta-information:
* - _ means: obsolete due to _ in name: replace _ with -
* - > means: obsolete spelling; use spelling from rest of string
* - ! means: obsolete and ignored (no replacement)
* - anything else is a description of the options argument (printed by --help)
*   If it starts with ^, that means start a newline in the --help output.
*
* The table should be ordered to maximize the clarity of --help.
*
*/

456enum {
OPT_OFFSET = 256, /* larger than largest char */
OPT_EFENCE_PROTECT,
OPT_DEBUG,
OPT_IMPAIR,
OPT_DNSSEC_ROOTKEY_FILE,
OPT_DNSSEC_TRUSTED,
463};

465static const struct option long_opts[] = {
/* name, has_arg, flag, val */
{ "help\0", no_argument0, NULL((void*)0), 'h' },
{ "version\0", no_argument0, NULL((void*)0), 'v' },
{ "config\0<filename>", required_argument1, NULL((void*)0), 'z' },
{ "nofork\0", no_argument0, NULL((void*)0), '0' },
{ "stderrlog\0", no_argument0, NULL((void*)0), 'e' },
{ "logfile\0<filename>", required_argument1, NULL((void*)0), 'g' },
473#ifdef USE_DNSSEC1
{ "dnssec-rootkey-file\0<filename>", required_argument1, NULL((void*)0),
OPT_DNSSEC_ROOTKEY_FILE },
{ "dnssec-trusted\0<filename>", required_argument1, NULL((void*)0),
OPT_DNSSEC_TRUSTED },
478#endif
{ "log-no-time\0", no_argument0, NULL((void*)0), 't' }, /* was --plutostderrlogtime */
{ "log-no-append\0", no_argument0, NULL((void*)0), '7' },
{ "log-no-ip\0", no_argument0, NULL((void*)0), '<' },
{ "log-no-audit\0", no_argument0, NULL((void*)0), 'a' },
{ "force-busy\0", no_argument0, NULL((void*)0), 'D' },
{ "force-unlimited\0", no_argument0, NULL((void*)0), 'U' },
{ "crl-strict\0", no_argument0, NULL((void*)0), 'r' },
{ "ocsp-strict\0", no_argument0, NULL((void*)0), 'o' },
{ "ocsp-enable\0", no_argument0, NULL((void*)0), 'O' },
{ "ocsp-uri\0", required_argument1, NULL((void*)0), 'Y' },
{ "ocsp-timeout\0", required_argument1, NULL((void*)0), 'T' },
{ "ocsp-trustname\0", required_argument1, NULL((void*)0), 'J' },
{ "ocsp-cache-size\0", required_argument1, NULL((void*)0), 'E' },
{ "ocsp-cache-min-age\0", required_argument1, NULL((void*)0), 'G' },
{ "ocsp-cache-max-age\0", required_argument1, NULL((void*)0), 'H' },
{ "ocsp-method\0", required_argument1, NULL((void*)0), 'B' },
{ "crlcheckinterval\0", required_argument1, NULL((void*)0), 'x' },
{ "uniqueids\0", no_argument0, NULL((void*)0), 'u' },
{ "no-dnssec\0", no_argument0, NULL((void*)0), 'R' },
{ "use-xfrm\0", no_argument0, NULL((void*)0), 'K' },
{ "use-bsdkame\0",   no_argument0, NULL((void*)0), 'F' },
{ "interface\0<ifname|ifaddr>", required_argument1, NULL((void*)0), 'i' },
{ "curl-iface\0<ifname|ifaddr>", required_argument1, NULL((void*)0), 'Z' },
{ "curl-timeout\0<secs>", required_argument1, NULL((void*)0), 'I' },
{ "listen\0<ifaddr>", required_argument1, NULL((void*)0), 'L' },
{ "listen-tcp\0", no_argument0, NULL((void*)0), 'm' },
{ "no-listen-udp\0", no_argument0, NULL((void*)0), 'p' },
{ "ike-socket-bufsize\0<buf-size>", required_argument1, NULL((void*)0), 'W' },
{ "ike-socket-no-errqueue\0", no_argument0, NULL((void*)0), '1' },
{ "nflog-all\0<group-number>", required_argument1, NULL((void*)0), 'G' },
{ "rundir\0<path>", required_argument1, NULL((void*)0), 'b' }, /* was ctlbase */
{ "secretsfile\0<secrets-file>", required_argument1, NULL((void*)0), 's' },
{ "global-redirect\0", required_argument1, NULL((void*)0), 'Q'},
{ "global-redirect-to\0", required_argument1, NULL((void*)0), 'y'},
{ "coredir\0>dumpdir", required_argument1, NULL((void*)0), 'C' },	/* redundant spelling */
{ "dumpdir\0<dirname>", required_argument1, NULL((void*)0), 'C' },
{ "statsbin\0<filename>", required_argument1, NULL((void*)0), 'S' },
{ "ipsecdir\0<ipsec-dir>", required_argument1, NULL((void*)0), 'f' },
{ "foodgroupsdir\0>ipsecdir", required_argument1, NULL((void*)0), 'f' },	/* redundant spelling */
{ "nssdir\0<path>", required_argument1, NULL((void*)0), 'd' },	/* nss-tools use -d */
{ "keep-alive\0<delay_secs>", required_argument1, NULL((void*)0), '2' },
{ "virtual-private\0<network_list>", required_argument1, NULL((void*)0), '6' },
{ "nhelpers\0<number>", required_argument1, NULL((void*)0), 'j' },
{ "expire-shunt-interval\0<secs>", required_argument1, NULL((void*)0), '9' },
{ "seedbits\0<number>", required_argument1, NULL((void*)0), 'c' },
/* really an attribute type, not a value */
{ "ikev1-secctx-attr-type\0<number>", required_argument1, NULL((void*)0), 'w' },
{ "ikev1-reject\0", no_argument0, NULL((void*)0), 'k' },
{ "ikev1-drop\0", no_argument0, NULL((void*)0), 'l' },
528#ifdef HAVE_SECCOMP1
{ "seccomp-enabled\0", no_argument0, NULL((void*)0), '3' },
{ "seccomp-tolerant\0", no_argument0, NULL((void*)0), '4' },
531#endif
{ "vendorid\0<vendorid>", required_argument1, NULL((void*)0), 'V' },

{ "selftest\0", no_argument0, NULL((void*)0), '5' },

{ "leak-detective\0", no_argument0, NULL((void*)0), 'X' },
{ "efence-protect\0", required_argument1, NULL((void*)0), OPT_EFENCE_PROTECT, },
{ "debug-none\0^", no_argument0, NULL((void*)0), 'N' },
{ "debug-all\0", no_argument0, NULL((void*)0), 'A' },
{ "debug\0", required_argument1, NULL((void*)0), OPT_DEBUG, },
{ "impair\0", required_argument1, NULL((void*)0), OPT_IMPAIR, },

{ 0, 0, 0, 0 }
544};

546/*
* HACK: check UGH, and if it is bad, log it along with the option.
*/

550static void fatal_opt(int longindex, struct logger *logger, const char *fmt, ...)
551{
passert(longindex >= 0)({ _Bool assertion__ = longindex >= 0; if (!assertion__) {
 where_t here = ({ static const struct where here = { .func =
 __func__, .file = "programs/pluto/plutomain.c", .line = 552,
 }; &here; }); const struct logger *logger_ = &failsafe_logger
; llog_passert(logger_, here, "%s", "longindex >= 0"); } (
void) 1; });
const char *optname = long_opts[longindex].name;
LLOG_JAMBUF(RC_LOG, logger, buf)for (char lswbuf[((size_t)1024)], *lswbuf_ = lswbuf; lswbuf_ !=
 ((void*)0); lswbuf_ = ((void*)0)) for (struct jambuf jambuf =
 array_as_jambuf((lswbuf), sizeof(lswbuf)), *buf = &jambuf
; buf != ((void*)0); buf = ((void*)0)) for (({ if (((RC_LOG) &
 NO_PREFIX) == ((lset_t)0) && (((RC_LOG) & STREAM_MASK
) != DEBUG_STREAM || (cur_debugging & (((lset_t)1 <<
 (DBG_ADD_PREFIX_IX)))))) { (logger)->object_vec->jam_object_prefix
(buf, (logger)->object); } }); buf != ((void*)0); jambuf_to_logger
(buf, (logger), RC_LOG), buf = ((void*)0)) {
if (optarg == NULL((void*)0)) {
	jam(buf, "option --%s invalid: ", optname);
} else {
	jam(buf, "option --%s \"%s\" invalid: ", optname, optarg);
}
va_list ap;
va_start(ap, fmt)__builtin_va_start(ap, fmt);
jam_va_list(buf, fmt, ap);
va_end(ap)__builtin_va_end(ap);
}
/* not exit_pluto as pluto isn't yet up and running? */
exit(PLUTO_EXIT_FAIL);
567}

569static void check_err(err_t ugh, int longindex, struct logger *logger)
570{
if (ugh != NULL((void*)0)) {
fatal_opt(longindex, logger, "%s", ugh);
}
574}

576/* print full usage (from long_opts[]) */
577static void usage(FILE *stream)
578{
const struct option *opt;
char line[72];
size_t lw;

snprintf(line, sizeof(line), "Usage: %s", pluto_name);
lw = strlen(line);

for (opt = long_opts; opt->name != NULL((void*)0); opt++) {
const char *nm = opt->name;
const char *meta = nm + strlen(nm) + 1;
bool_Bool force_nl = false0;
char chunk[sizeof(line) - 1];
int cw;

switch (*meta) {
case '_':
case '>':
case '!':
	/* ignore these entries */
	break;
case '^':
	force_nl = true1;
	meta++;	/* eat ^ */
	/* FALL THROUGH */
default:
	if (*meta == '\0')
		snprintf(chunk, sizeof(chunk),  "[--%s]", nm);
	else
		snprintf(chunk, sizeof(chunk),  "[--%s %s]", nm, meta);
	cw = strlen(chunk);

	if (force_nl || lw + cw + 2 >= sizeof(line)) {
		fprintf(stream, "%s\n", line);
		line[0] = '\t';
		lw = 1;
	} else {
		line[lw++] = ' ';
	}
	passert(lw + cw + 1 < sizeof(line))({ _Bool assertion__ = lw + cw + 1 < sizeof(line); if (!assertion__
) { where_t here = ({ static const struct where here = { .func
 = __func__, .file = "programs/pluto/plutomain.c", .line = 617
, }; &here; }); const struct logger *logger_ = &failsafe_logger
; llog_passert(logger_, here, "%s", "lw + cw + 1 < sizeof(line)"
); } (void) 1; });
	strcpy(&line[lw], chunk);
	lw += cw;
}
}

fprintf(stream, "%s\n", line);

fprintf(stream, "Libreswan %s\n", ipsec_version_code());
626}

628#ifdef USE_DNSSEC1
629static void set_dnssec_file_names (struct starter_config *cfg)
630{
if (cfg->setup.strings[KSF_PLUTO_DNSSEC_ROOTKEY_FILE][0] != '\0') {
pfreeany(pluto_dnssec_rootfile){ typeof(pluto_dnssec_rootfile) *pp_ = &(pluto_dnssec_rootfile
); if (*pp_ != ((void*)0)) { pfree(*pp_); *pp_ = ((void*)0); }
 };
set_cfg_string(&pluto_dnssec_rootfile,
		cfg->setup.strings[KSF_PLUTO_DNSSEC_ROOTKEY_FILE]);
} else {
/* unset the global one config file unset it */
pfreeany(pluto_dnssec_rootfile){ typeof(pluto_dnssec_rootfile) *pp_ = &(pluto_dnssec_rootfile
); if (*pp_ != ((void*)0)) { pfree(*pp_); *pp_ = ((void*)0); }
 };
pluto_dnssec_rootfile = NULL((void*)0);
}
if (cfg->setup.strings[KSF_PLUTO_DNSSEC_ANCHORS] != NULL((void*)0) &&
	cfg->setup.strings[KSF_PLUTO_DNSSEC_ANCHORS][0] != '\0') {
set_cfg_string(&pluto_dnssec_trusted,
		cfg->setup.strings[KSF_PLUTO_DNSSEC_ANCHORS]);
}
645}
646#endif

648#ifdef USE_EFENCE
649extern int EF_PROTECT_BELOW;
650extern int EF_PROTECT_FREE;
651#endif

653int main(int argc, char **argv)
654{
struct log_param log_param = default_log_param;

/*
* Some options should to be processed before the first
* malloc() call, so scan for them here.
*
* - leak-detective is immutable, it must come before the
*   first malloc()
*
* - efence-protect seems to be less strict, but enabling it
*   early must be a good thing (TM) right
*/
for (int i = 1; i < argc; ++i) {
1
Assuming 'i' is >= 'argc'→
2
←
Loop condition is false. Execution continues on line 684→
if (streq(argv[i], "--leak-detective")(strcmp((argv[i]), ("--leak-detective")) == 0))
	leak_detective = true1;
670#ifdef USE_EFENCE
else if (streq(argv[i], "--efence-protect")(strcmp((argv[i]), ("--efence-protect")) == 0)) {
	EF_PROTECT_BELOW = 1;
	EF_PROTECT_FREE = 1;
}
675#endif
}

/*
* Identify the main thread.
*
* Also used as a reserved thread for code wanting to
* determine if it is running on an aux thread.
*/
main_thread = pthread_self();

int lockfd;

/*
* We read the intentions for how to log from command line options
* and the config file. Then we prepare to be able to log, but until
* then log to stderr (better then nothing). Once we are ready to
* actually do logging according to the methods desired, we set the
* variables for those methods
*/
bool_Bool log_to_stderr_desired = false0;
bool_Bool log_to_file_desired = false0;

/*
* Start with the program name logger.
*/
pluto_name = argv[0];
struct logger *logger = string_logger(null_fd((struct fd *) ((void*)0)), HERE({ static const struct where here = { .func = __func__, .file
 = "programs/pluto/plutomain.c", .line = 702, }; &here; }
), "%s: ", pluto_name); /* must free */

conffile = clone_str(IPSEC_CONF, "conffile in main()")(("/etc/ipsec.conf") == ((void*)0) ? ((void*)0) : clone_bytes
(("/etc/ipsec.conf"), strlen(("/etc/ipsec.conf")) + 1, ("conffile in main()"
)));
3
←
'?' condition is false→
coredir = clone_str(DEFAULT_RUNDIR, "coredir in main()")(("/run/pluto") == ((void*)0) ? ((void*)0) : clone_bytes(("/run/pluto"
), strlen(("/run/pluto")) + 1, ("coredir in main()")));
4
←
'?' condition is false→
rundir = clone_str(DEFAULT_RUNDIR, "rundir")(("/run/pluto") == ((void*)0) ? ((void*)0) : clone_bytes(("/run/pluto"
), strlen(("/run/pluto")) + 1, ("rundir")));
5
←
'?' condition is false→
pluto_vendorid = clone_str(ipsec_version_vendorid(), "vendorid in main()")((ipsec_version_vendorid()) == ((void*)0) ? ((void*)0) : clone_bytes
((ipsec_version_vendorid()), strlen((ipsec_version_vendorid()
)) + 1, ("vendorid in main()")));
6
←
Null pointer value stored to 'rundir'→
7
←
Assuming the condition is true→
8
←
'?' condition is true→
708#ifdef USE_DNSSEC1
pluto_dnssec_rootfile = clone_str(DEFAULT_DNSSEC_ROOTKEY_FILE, "root.key file")(("/var/lib/unbound/root.key") == ((void*)0) ? ((void*)0) : clone_bytes
(("/var/lib/unbound/root.key"), strlen(("/var/lib/unbound/root.key"
)) + 1, ("root.key file")));
9
←
'?' condition is false→
710#endif
pluto_lock_filename = clone_str(DEFAULT_RUNDIR "/pluto.pid", "lock file")(("/run/pluto" "/pluto.pid") == ((void*)0) ? ((void*)0) : clone_bytes
(("/run/pluto" "/pluto.pid"), strlen(("/run/pluto" "/pluto.pid"
)) + 1, ("lock file")));
10
←
'?' condition is false→

deltatime_t keep_alive = DELTATIME_INIT(0){ .dt = { .tv_sec = (0), } };

/* Overridden by virtual_private= in ipsec.conf */
char *virtual_private = NULL((void*)0);

/* handle arguments */
for (;; ) {
11
←
Loop condition is true.  Entering loop body→
/*
 * Note: we don't like the way short options get parsed
 * by getopt_long, so we simply pass an empty string as
 * the list.  It could be "hvdenp:l:s:" "NARXPECK".
 */
int longindex = -1;
int c = getopt_long(argc, argv, "", long_opts, &longindex);
if (c < 0)
12
←
Assuming 'c' is < 0→
13
←
Taking true branch→
	break;
14
←
 Execution continues on line 1428→

if (longindex >= 0) {
	passert(c != '?' && c != ':')({ _Bool assertion__ = c != '?' && c != ':'; if (!assertion__
) { where_t here = ({ static const struct where here = { .func
 = __func__, .file = "programs/pluto/plutomain.c", .line = 731
, }; &here; }); const struct logger *logger_ = &failsafe_logger
; llog_passert(logger_, here, "%s", "c != '?' && c != ':'"
); } (void) 1; }); /* no error */
	const char *optname = long_opts[longindex].name;
	const char *optmeta = optname + strlen(optname) + 1;	/* after '\0' */
	switch (optmeta[0]) {
	case '_':
		llog(RC_LOG, logger,
			    "warning: option \"--%s\" with '_' in its name is obsolete; use '-'",
			    optname);
		break;
	case '>':
		llog(RC_LOG, logger,
			    "warning: option \"--%s\" is obsolete; use \"--%s\"", optname, optmeta + 1);
		break;
	case '!':
		llog(RC_LOG, logger,
			    "warning: option \"--%s\" is obsolete; ignored", optname);
		continue;	/* ignore it! */
	}
}

switch (c) {

case 0:
	/*
	 * Long option already handled by getopt_long.
	 * Not currently used since we always set flag to NULL.
	 */
	passert_failllog_passert(logger, HERE({ static const struct where here = { .func = __func__, .file
 = "programs/pluto/plutomain.c", .line = 758, }; &here; }
), "unexpected 0 returned by getopt_long()");

case ':':	/* diagnostic already printed by getopt_long */
case '?':	/* diagnostic already printed by getopt_long */
	fprintf(stderrstderr, "For usage information: %s --help\n", pluto_name);
	fprintf(stderrstderr, "Libreswan %s\n", ipsec_version_code());
	exit(PLUTO_EXIT_FAIL);

case 'h':	/* --help */
	usage(stdoutstdout); /* so <<| more>> works */
	exit(PLUTO_EXIT_OK);

case 'X':	/* --leak-detective */
	/*
	 * This flag was already processed at the start of main()
	 * because leak_detective must be immutable from before
	 * the first alloc().
	 * If this option is specified, we must have already
	 * set it at the start of main(), so assert it.
	 */
	passert(leak_detective)({ _Bool assertion__ = leak_detective; if (!assertion__) { where_t
 here = ({ static const struct where here = { .func = __func__
, .file = "programs/pluto/plutomain.c", .line = 778, }; &
here; }); const struct logger *logger_ = &failsafe_logger
; llog_passert(logger_, here, "%s", "leak_detective"); } (void
) 1; });
	continue;

case 'C':	/* --coredir */
	pfree(coredir);
	coredir = clone_str(optarg, "coredir via getopt")((optarg) == ((void*)0) ? ((void*)0) : clone_bytes((optarg), strlen
((optarg)) + 1, ("coredir via getopt")));
	continue;

case 'V':	/* --vendorid */
	pfree(pluto_vendorid);
	pluto_vendorid = clone_str(optarg, "pluto_vendorid via getopt")((optarg) == ((void*)0) ? ((void*)0) : clone_bytes((optarg), strlen
((optarg)) + 1, ("pluto_vendorid via getopt")));
	continue;

case 'S':	/* --statsdir */
	pfreeany(pluto_stats_binary){ typeof(pluto_stats_binary) *pp_ = &(pluto_stats_binary)
; if (*pp_ != ((void*)0)) { pfree(*pp_); *pp_ = ((void*)0); }
 };
	pluto_stats_binary = clone_str(optarg, "statsbin")((optarg) == ((void*)0) ? ((void*)0) : clone_bytes((optarg), strlen
((optarg)) + 1, ("statsbin")));
	continue;

case 'v':	/* --version */
	printf("%s%s\n", ipsec_version_string(), /* ok */
	       compile_time_interop_options);
	/* not exit_pluto because we are not initialized yet */
	exit(PLUTO_EXIT_OK);

case 'j':	/* --nhelpers */
	if (streq(optarg, "-1")(strcmp((optarg), ("-1")) == 0)) {
		nhelpers = -1;
	} else {
		unsigned long u;
		check_err(ttoulb(optarg, 0, 10, 1000, &u),
			  longindex, logger);
		nhelpers = u;
	}
	continue;

case 'c':	/* --seedbits */
	pluto_nss_seedbits = atoi(optarg);
	if (pluto_nss_seedbits == 0) {
		llog(RC_LOG, logger, "seedbits must be an integer > 0");
		/* not exit_pluto because we are not initialized yet */
		exit(PLUTO_EXIT_NSS_FAIL);
	}
	continue;

822#ifdef HAVE_LABELED_IPSEC1
case 'w':	/* --secctx-attr-type */
{
	unsigned long u;
	check_err(ttoulb(optarg, 0, 0, 0xFFFF, &u),
		  longindex, logger);
	if (u != SECCTX && u != ECN_TUNNEL_or_old_SECCTX) {
		fatal_opt(longindex, logger,
			  "must be a positive 32001 (default) or 10 (for backward compatibility)");
	}
	secctx_attr_type = u;
	continue;
}
835#endif

case 'k':	/* --ikev1-reject */
	pluto_ikev1_pol = GLOBAL_IKEv1_REJECT;
	continue;

case 'l':	/* --ikev1-drop */
	pluto_ikev1_pol = GLOBAL_IKEv1_DROP;
	continue;

case '0':	/* --nofork*/
	fork_desired = false0;
	continue;

case 'e':	/* --stderrlog */
	log_to_stderr_desired = true1;
	continue;

case 'g':	/* --logfile */
	pluto_log_file = clone_str(optarg, "pluto_log_file")((optarg) == ((void*)0) ? ((void*)0) : clone_bytes((optarg), strlen
((optarg)) + 1, ("pluto_log_file")));
	log_to_file_desired = true1;
	continue;
857#ifdef USE_DNSSEC1
case OPT_DNSSEC_ROOTKEY_FILE:	/* --dnssec-rootkey-file */
	if (optarg[0] != '\0') {
		pfree(pluto_dnssec_rootfile);
		pluto_dnssec_rootfile = clone_str(optarg,((optarg) == ((void*)0) ? ((void*)0) : clone_bytes((optarg), strlen
((optarg)) + 1, ("dnssec_rootkey_file")))
				"dnssec_rootkey_file")((optarg) == ((void*)0) ? ((void*)0) : clone_bytes((optarg), strlen
((optarg)) + 1, ("dnssec_rootkey_file")));
	}
	continue;

case OPT_DNSSEC_TRUSTED:	/* --dnssec-trusted */
	pluto_dnssec_trusted = clone_str(optarg, "pluto_dnssec_trusted")((optarg) == ((void*)0) ? ((void*)0) : clone_bytes((optarg), strlen
((optarg)) + 1, ("pluto_dnssec_trusted")));
	continue;
869#endif  /* USE_DNSSEC */

case 't':	/* --log-no-time */
	log_param.log_with_timestamp = false0;
	continue;

case '7':	/* --log-no-append */
	log_append = false0;
	continue;

case '<':	/* --log-no-ip */
	log_ip = false0;
	continue;

case 'a':	/* --log-no-audit */
	log_to_audit = false0;
	continue;

case '8':	/* --drop-oppo-null */
	pluto_drop_oppo_null = true1;
	continue;

case '9':	/* --expire-shunt-interval <interval> */
{
	unsigned long d = 0;
	check_err(ttoulb(optarg, 0, 10, 1000, &d), longindex, logger);
	bare_shunt_interval = deltatime(d);
	continue;
}

case 'L':	/* --listen ip_addr */
{
	ip_address lip;
	err_t e = ttoaddress_num(shunk1(optarg), NULL((void*)0)/*UNSPEC*/, &lip);

	if (e != NULL((void*)0)) {
		/*
		 * ??? should we continue on failure?
		 */
		llog(RC_LOG, logger,
			    "invalid listen argument ignored: %s\n", e);
	} else {
		pluto_listen = clone_str(optarg, "pluto_listen")((optarg) == ((void*)0) ? ((void*)0) : clone_bytes((optarg), strlen
((optarg)) + 1, ("pluto_listen")));
		llog(RC_LOG, logger,
			    "bind() will be filtered for %s\n",
			    pluto_listen);
	}
	continue;
}

case 'F':	/* --use-bsdkame */
920#ifdef BSDKAME_SUPPORT
	kernel_ops = &bsdkame_kernel_ops;
922#else
	llog(RC_LOG, logger, "--use-bsdkame not supported");
924#endif
	continue;

case 'K':	/* --use-netkey */
928#ifdef XFRM_SUPPORT1
	kernel_ops = &xfrm_kernel_ops;
930#else
	llog(RC_LOG, logger, "--use-xfrm not supported");
932#endif
	continue;

case 'D':	/* --force-busy */
	pluto_ddos_mode = DDOS_FORCE_BUSY;
	continue;
case 'U':	/* --force-unlimited */
	pluto_ddos_mode = DDOS_FORCE_UNLIMITED;
	continue;

942#ifdef HAVE_SECCOMP1
case '3':	/* --seccomp-enabled */
	pluto_seccomp_mode = SECCOMP_ENABLED;
	continue;
case '4':	/* --seccomp-tolerant */
	pluto_seccomp_mode = SECCOMP_TOLERANT;
	continue;
949#endif

case 'Z':	/* --curl-iface */
	curl_iface = clone_str(optarg, "curl_iface")((optarg) == ((void*)0) ? ((void*)0) : clone_bytes((optarg), strlen
((optarg)) + 1, ("curl_iface")));
	continue;

case 'I':	/* --curl-timeout */
{
	unsigned long u;
	check_err(ttoulb(optarg, /*not lower-bound*/0, 10, 0xFFFF, &u),
		  longindex, logger);
	if (u == 0) {
		fatal_opt(longindex, logger, "must not be < 1");
	}
	curl_timeout = u;
	continue;
}

case 'r':	/* --crl-strict */
	crl_strict = true1;
	continue;

case 'x':	/* --crlcheckinterval <seconds> */
{
	unsigned long u;
	check_err(ttoulb(optarg, /*not lower-bound*/0, 10, (unsigned long) TIME_T_MAX((time_t) ((1ull << (sizeof(time_t) * 8 - 1)) - 1)), &u),
		  longindex, logger);
	crl_check_interval = deltatime(u);
	continue;
}

case 'o':
	ocsp_strict = true1;
	continue;

case 'O':
	ocsp_enable = true1;
	continue;

case 'Y':
	ocsp_uri = clone_str(optarg, "ocsp_uri")((optarg) == ((void*)0) ? ((void*)0) : clone_bytes((optarg), strlen
((optarg)) + 1, ("ocsp_uri")));
	continue;

case 'J':
	ocsp_trust_name = clone_str(optarg, "ocsp_trust_name")((optarg) == ((void*)0) ? ((void*)0) : clone_bytes((optarg), strlen
((optarg)) + 1, ("ocsp_trust_name")));
	continue;

case 'T':	/* --ocsp_timeout <seconds> */
{
	unsigned long u;
	check_err(ttoulb(optarg, /*not-lower-bound*/0, 10, 0xFFFF, &u),
		  longindex, logger);
	if (u == 0) {
		fatal_opt(longindex, logger, "must not be 0");
		continue;
	}
	ocsp_timeout = u;
	continue;
}

case 'E':	/* --ocsp-cache-size <entries> */
{
	unsigned long u;
	check_err(ttoulb(optarg, 0, 10, 0xFFFF, &u), longindex, logger);
	ocsp_cache_size = u;
	continue;
}

case 'G':	/* --ocsp-cache-min-age <seconds> */
{
	unsigned long u;
	check_err(ttoulb(optarg, 0, 10, 0xFFFF, &u), longindex, logger);
	ocsp_cache_min_age = u;
	continue;
}

case 'H':	/* --ocsp-cache-max-age <seconds> */
{
	unsigned long u;
	check_err(ttoulb(optarg, 0, 10, 0xFFFF, &u), longindex, logger);
	ocsp_cache_max_age = u;
	continue;
}

case 'B':	/* --ocsp-method get|post */
	if (streq(optarg, "post")(strcmp((optarg), ("post")) == 0)) {
		ocsp_method = OCSP_METHOD_POST;
		ocsp_post = true1;
	} else {
		if (streq(optarg, "get")(strcmp((optarg), ("get")) == 0)) {
			ocsp_method = OCSP_METHOD_GET;
		} else {
			fatal_opt(longindex, logger, "ocsp-method is either 'post' or 'get'");
		}
	}
	continue;

case 'u':	/* --uniqueids */
	uniqueIDs = true1;
	continue;

case 'R':	/* --no-dnssec */
	do_dnssec = false0;
	continue;

case 'i':	/* --interface <ifname|ifaddr> */
	if (!use_interface(optarg)) {
		fatal_opt(longindex, logger, "too many --interface specifications");
	}
	continue;

case '1':	/* --ike-socket-no-errqueue */
	pluto_sock_errqueue = false0;
	continue;

case 'W':	/* --ike-socket-bufsize <bufsize> */
{
	unsigned long u;
	check_err(ttoulb(optarg, 0, 10, 0xFFFF, &u), longindex, logger);
	if (u == 0) {
		fatal_opt(longindex, logger, "must not be 0");
	}
	pluto_sock_bufsize = u;
	continue;
}

case 'p':	/* --no-listen-udp */
	pluto_listen_udp = false0;
	continue;

case 'm':	/* --listen-tcp */
	pluto_listen_tcp = true1;
	continue;

case 'b':	/* --rundir <path> */
	/*
	 * ??? work to be done here:
	 *
	 * snprintf returns the required space if there
	 * isn't enough, not -1.
	 * -1 indicates another kind of error.
	 */
	if (snprintf(ctl_addr.sun_path, sizeof(ctl_addr.sun_path),
		     "%s/pluto.ctl", optarg) == -1) {
		fatal_opt(longindex, logger, "--rundir argument is invalid for sun_path socket");
	}

	pfree(pluto_lock_filename);
	pluto_lock_filename = alloc_printf("%s/pluto.pid", optarg);
	pfreeany(rundir){ typeof(rundir) *pp_ = &(rundir); if (*pp_ != ((void*)0)
) { pfree(*pp_); *pp_ = ((void*)0); } };
	rundir = clone_str(optarg, "rundir")((optarg) == ((void*)0) ? ((void*)0) : clone_bytes((optarg), strlen
((optarg)) + 1, ("rundir")));
	continue;

case 's':	/* --secretsfile <secrets-file> */
	lsw_conf_secretsfile(optarg);
	continue;

case 'f':	/* --ipsecdir <ipsec-dir> */
	lsw_conf_confddir(optarg, logger);
	continue;

case 'd':	/* --nssdir <path> */
	lsw_conf_nssdir(optarg, logger);
	continue;

case 'N':	/* --debug-none */
	cur_debugging = DBG_NONE0;
	continue;

case 'A':	/* --debug-all */
	cur_debugging = DBG_ALL(((lset_t)1 << (DBG_BASE_IX)) | ((lset_t)1 << (DBG_CPU_USAGE_IX
)) | ((lset_t)1 << (DBG_REFCNT_IX)));
	continue;

case 'y':	/* --global-redirect-to */
{
	ip_address rip;
	check_err(ttoaddress_dns(shunk1(optarg), NULL((void*)0)/*UNSPEC*/, &rip),
		  longindex, logger);
	set_global_redirect_dests(optarg);
	llog(RC_LOG, logger,
		    "all IKE_SA_INIT requests will from now on be redirected to: %s\n",
		    optarg);
	continue;
}

case 'Q':	/* --global-redirect */
{
	if (streq(optarg, "yes")(strcmp((optarg), ("yes")) == 0)) {
		global_redirect = GLOBAL_REDIRECT_YES;
	} else if (streq(optarg, "no")(strcmp((optarg), ("no")) == 0)) {
		global_redirect = GLOBAL_REDIRECT_NO;
	} else if (streq(optarg, "auto")(strcmp((optarg), ("auto")) == 0)) {
		global_redirect = GLOBAL_REDIRECT_AUTO;
	} else {
		llog(RC_LOG, logger,
			    "invalid option argument for global-redirect (allowed arguments: yes, no, auto)");
	}
	continue;
}

case '2':	/* --keep-alive <delay_secs> */
{
	unsigned long u;
	check_err(ttoulb(optarg, 0, 10, secs_per_day, &u), longindex, logger);
	keep_alive = deltatime(u);
	continue;
}

case '5':	/* --selftest */
	selftest_only = true1;
	log_to_stderr_desired = true1;
	log_param.log_with_timestamp = false0;
	fork_desired = false0;
	continue;

case '6':	/* --virtual-private */
	virtual_private = clone_str(optarg, "virtual_private")((optarg) == ((void*)0) ? ((void*)0) : clone_bytes((optarg), strlen
((optarg)) + 1, ("virtual_private")));
	continue;

case 'z':	/* --config */
{
	/*
	 * Config struct to variables mapper. This will
	 * overwrite all previously set options. Keep this
	 * in the same order as long_opts[] is.
	 */
	pfree(conffile);
	conffile = clone_str(optarg, "conffile via getopt")((optarg) == ((void*)0) ? ((void*)0) : clone_bytes((optarg), strlen
((optarg)) + 1, ("conffile via getopt")));
	/* may not return */
	struct starter_config *cfg = read_cfg_file(conffile, longindex, logger);

	/* leak */
	set_cfg_string(&pluto_log_file,
		       cfg->setup.strings[KSF_LOGFILE]);
1183#ifdef USE_DNSSEC1
	set_dnssec_file_names(cfg);
1185#endif

	if (pluto_log_file != NULL((void*)0))
		log_to_syslog = false0;
	/* plutofork= no longer supported via config file */
	log_param.log_with_timestamp = cfg->setup.options[KBF_LOGTIME];
	log_append = cfg->setup.options[KBF_LOGAPPEND];
	log_ip = cfg->setup.options[KBF_LOGIP];
	log_to_audit = cfg->setup.options[KBF_AUDIT_LOG];
	pluto_drop_oppo_null = cfg->setup.options[KBF_DROP_OPPO_NULL];
	pluto_ddos_mode = cfg->setup.options[KBF_DDOS_MODE];
	pluto_ikev1_pol = cfg->setup.options[KBF_GLOBAL_IKEv1];
1197#ifndef USE_IKEv11
	if (pluto_ikev1_pol != GLOBAL_IKEv1_ACCEPT) {
		llog(RC_LOG, logger, "ignoring ikev1-policy= as IKEv1 support is not compiled in. Incoming IKEv1 packets are silently dropped");
		pluto_ikev1_pol = GLOBAL_IKEv1_DROP;
	}
1202#endif
1203#ifdef HAVE_SECCOMP1
	pluto_seccomp_mode = cfg->setup.options[KBF_SECCOMP];
1205#endif
	if (cfg->setup.options[KBF_FORCEBUSY]) {
		/* force-busy is obsoleted, translate to ddos-mode= */
		pluto_ddos_mode = cfg->setup.options[KBF_DDOS_MODE] = DDOS_FORCE_BUSY;
	}
	/* ddos-ike-threshold and max-halfopen-ike */
	pluto_ddos_threshold = cfg->setup.options[KBF_DDOS_IKE_THRESHOLD];
	pluto_max_halfopen = cfg->setup.options[KBF_MAX_HALFOPEN_IKE];

	crl_strict = cfg->setup.options[KBF_CRL_STRICT];

	pluto_shunt_lifetime = deltatime(cfg->setup.options[KBF_SHUNTLIFETIME]);

	ocsp_enable = cfg->setup.options[KBF_OCSP_ENABLE];
	ocsp_strict = cfg->setup.options[KBF_OCSP_STRICT];
	ocsp_timeout = cfg->setup.options[KBF_OCSP_TIMEOUT];
	ocsp_method = cfg->setup.options[KBF_OCSP_METHOD];
	ocsp_post = (ocsp_method == OCSP_METHOD_POST);
	ocsp_cache_size = cfg->setup.options[KBF_OCSP_CACHE_SIZE];
	ocsp_cache_min_age = cfg->setup.options[KBF_OCSP_CACHE_MIN];
	ocsp_cache_max_age = cfg->setup.options[KBF_OCSP_CACHE_MAX];

	set_cfg_string(&ocsp_uri,
		       cfg->setup.strings[KSF_OCSP_URI]);
	set_cfg_string(&ocsp_trust_name,
		       cfg->setup.strings[KSF_OCSP_TRUSTNAME]);

	char *tmp_global_redirect = cfg->setup.strings[KSF_GLOBAL_REDIRECT];
	if (tmp_global_redirect == NULL((void*)0) || streq(tmp_global_redirect, "no")(strcmp((tmp_global_redirect), ("no")) == 0)) {
		/* NULL means it is not specified so default is no */
		global_redirect = GLOBAL_REDIRECT_NO;
	} else if (streq(tmp_global_redirect, "yes")(strcmp((tmp_global_redirect), ("yes")) == 0)) {
		global_redirect = GLOBAL_REDIRECT_YES;
	} else if (streq(tmp_global_redirect, "auto")(strcmp((tmp_global_redirect), ("auto")) == 0)) {
		global_redirect = GLOBAL_REDIRECT_AUTO;
	} else {
		global_redirect = GLOBAL_REDIRECT_NO;
		llog(RC_LOG, logger, "unknown argument for global-redirect option");
	}

	crl_check_interval = deltatime(
		cfg->setup.options[KBF_CRL_CHECKINTERVAL]);
	uniqueIDs = cfg->setup.options[KBF_UNIQUEIDS];
1248#ifdef USE_DNSSEC1
	do_dnssec = cfg->setup.options[KBF_DO_DNSSEC];
1250#else
	do_dnssec = false0;
1252#endif
	/*
	 * We don't check interfaces= here because that part
	 * has been dealt with in _stackmanager before we
	 * started
	 */
	set_cfg_string(&pluto_listen,
		       cfg->setup.strings[KSF_LISTEN]);

	/* ike-socket-bufsize= */
	pluto_sock_bufsize = cfg->setup.options[KBF_IKEBUF];
	pluto_sock_errqueue = cfg->setup.options[KBF_IKE_ERRQUEUE];

	/* listen-tcp= / listen-udp= */
	pluto_listen_tcp = cfg->setup.options[KBF_LISTEN_TCP];
	pluto_listen_udp = cfg->setup.options[KBF_LISTEN_UDP];

	/* nflog-all= */
	/* only causes nflog nmber to show in ipsec status */
	pluto_nflog_group = cfg->setup.options[KBF_NFLOG_ALL];

	/* only causes nflog nmber to show in ipsec status */
	pluto_xfrmlifetime = cfg->setup.options[KBF_XFRMLIFETIME];

	/* no config option: rundir */
	/* secretsfile= */
	if (cfg->setup.strings[KSF_SECRETSFILE] &&
	    *cfg->setup.strings[KSF_SECRETSFILE]) {
		lsw_conf_secretsfile(cfg->setup.strings[KSF_SECRETSFILE]);
	}
	if (cfg->setup.strings[KSF_IPSECDIR] != NULL((void*)0) &&
	    *cfg->setup.strings[KSF_IPSECDIR] != 0) {
		/* ipsecdir= */
		lsw_conf_confddir(cfg->setup.strings[KSF_IPSECDIR], logger);
	}

	if (cfg->setup.strings[KSF_NSSDIR] != NULL((void*)0) &&
	    *cfg->setup.strings[KSF_NSSDIR] != 0) {
		/* nssdir= */
		lsw_conf_nssdir(cfg->setup.strings[KSF_NSSDIR], logger);
	}

	if (cfg->setup.strings[KSF_CURLIFACE]) {
		pfreeany(curl_iface){ typeof(curl_iface) *pp_ = &(curl_iface); if (*pp_ != ((
void*)0)) { pfree(*pp_); *pp_ = ((void*)0); } };
		/* curl-iface= */
		curl_iface = clone_str(cfg->setup.strings[KSF_CURLIFACE],((cfg->setup.strings[KSF_CURLIFACE]) == ((void*)0) ? ((void
*)0) : clone_bytes((cfg->setup.strings[KSF_CURLIFACE]), strlen
((cfg->setup.strings[KSF_CURLIFACE])) + 1, ("curl-iface= via --config"
)))
				       "curl-iface= via --config")((cfg->setup.strings[KSF_CURLIFACE]) == ((void*)0) ? ((void
*)0) : clone_bytes((cfg->setup.strings[KSF_CURLIFACE]), strlen
((cfg->setup.strings[KSF_CURLIFACE])) + 1, ("curl-iface= via --config"
)));
	}

	if (cfg->setup.options[KBF_CURLTIMEOUT])
		curl_timeout = cfg->setup.options[KBF_CURLTIMEOUT];

	if (cfg->setup.strings[KSF_DUMPDIR]) {
		pfree(coredir);
		/* dumpdir= */
		coredir = clone_str(cfg->setup.strings[KSF_DUMPDIR],((cfg->setup.strings[KSF_DUMPDIR]) == ((void*)0) ? ((void*
)0) : clone_bytes((cfg->setup.strings[KSF_DUMPDIR]), strlen
((cfg->setup.strings[KSF_DUMPDIR])) + 1, ("coredir via --config"
)))
				    "coredir via --config")((cfg->setup.strings[KSF_DUMPDIR]) == ((void*)0) ? ((void*
)0) : clone_bytes((cfg->setup.strings[KSF_DUMPDIR]), strlen
((cfg->setup.strings[KSF_DUMPDIR])) + 1, ("coredir via --config"
)));
	}
	/* vendorid= */
	if (cfg->setup.strings[KSF_MYVENDORID]) {
		pfree(pluto_vendorid);
		pluto_vendorid = clone_str(cfg->setup.strings[KSF_MYVENDORID],((cfg->setup.strings[KSF_MYVENDORID]) == ((void*)0) ? ((void
*)0) : clone_bytes((cfg->setup.strings[KSF_MYVENDORID]), strlen
((cfg->setup.strings[KSF_MYVENDORID])) + 1, ("pluto_vendorid via --config"
)))
					   "pluto_vendorid via --config")((cfg->setup.strings[KSF_MYVENDORID]) == ((void*)0) ? ((void
*)0) : clone_bytes((cfg->setup.strings[KSF_MYVENDORID]), strlen
((cfg->setup.strings[KSF_MYVENDORID])) + 1, ("pluto_vendorid via --config"
)));
	}

	if (cfg->setup.strings[KSF_STATSBINARY] != NULL((void*)0)) {
		if (access(cfg->setup.strings[KSF_STATSBINARY], X_OK1) == 0) {
			pfreeany(pluto_stats_binary){ typeof(pluto_stats_binary) *pp_ = &(pluto_stats_binary)
; if (*pp_ != ((void*)0)) { pfree(*pp_); *pp_ = ((void*)0); }
 };
			/* statsbin= */
			pluto_stats_binary = clone_str(cfg->setup.strings[KSF_STATSBINARY], "statsbin via --config")((cfg->setup.strings[KSF_STATSBINARY]) == ((void*)0) ? ((void
*)0) : clone_bytes((cfg->setup.strings[KSF_STATSBINARY]), strlen
((cfg->setup.strings[KSF_STATSBINARY])) + 1, ("statsbin via --config"
)));
			llog(RC_LOG, logger, "statsbinary set to %s", pluto_stats_binary);
		} else {
			llog(RC_LOG, logger, "statsbinary= '%s' ignored - file does not exist or is not executable",
				    pluto_stats_binary);
		}
	}

	pluto_nss_seedbits = cfg->setup.options[KBF_SEEDBITS];
	keep_alive = deltatime(cfg->setup.options[KBF_KEEPALIVE]);

	set_cfg_string(&virtual_private,
		       cfg->setup.strings[KSF_VIRTUALPRIVATE]);

	set_global_redirect_dests(cfg->setup.strings[KSF_GLOBAL_REDIRECT_TO]);

	nhelpers = cfg->setup.options[KBF_NHELPERS];
	secctx_attr_type = cfg->setup.options[KBF_SECCTX];
	cur_debugging = cfg->setup.options[KBF_PLUTODEBUG];

	char *protostack = cfg->setup.strings[KSF_PROTOSTACK];
	passert(kernel_ops != NULL)({ _Bool assertion__ = kernel_ops != ((void*)0); if (!assertion__
) { where_t here = ({ static const struct where here = { .func
 = __func__, .file = "programs/pluto/plutomain.c", .line = 1342
, }; &here; }); const struct logger *logger_ = &failsafe_logger
; llog_passert(logger_, here, "%s", "kernel_ops != ((void*)0)"
); } (void) 1; });

	if (!(protostack == NULL((void*)0) || *protostack == '\0')) {
		if (streq(protostack, "auto")(strcmp((protostack), ("auto")) == 0) || streq(protostack, "native")(strcmp((protostack), ("native")) == 0) ||
		    streq(protostack, "nokernel")(strcmp((protostack), ("nokernel")) == 0)) {

			llog(RC_LOG, logger, "the option protostack=%s is obsoleted, falling back to protostack=%s",
				    protostack, kernel_ops->kern_name);
		} else if (streq(protostack, "klips")(strcmp((protostack), ("klips")) == 0)) {
			fatal(PLUTO_EXIT_KERNEL_FAIL, logger,
			      "protostack=klips is obsoleted, please migrate to protostack=xfrm");
1353#ifdef XFRM_SUPPORT1
		} else if (streq(protostack, "xfrm")(strcmp((protostack), ("xfrm")) == 0) ||
			   streq(protostack, "netkey")(strcmp((protostack), ("netkey")) == 0)) {
			kernel_ops = &xfrm_kernel_ops;
1357#endif
1358#ifdef BSD_KAME
		} else if (streq(protostack, "bsd")(strcmp((protostack), ("bsd")) == 0) ||
			   streq(protostack, "kame")(strcmp((protostack), ("kame")) == 0) ||
			   streq(protostack, "bsdkame")(strcmp((protostack), ("bsdkame")) == 0)) {
			kernel_ops = &bsdkame_kernel_ops;
1363#endif
		} else {
			llog(RC_LOG, logger, "protostack=%s ignored, using default protostack=%s",
				    protostack, kernel_ops->kern_name);
		}
	}

	confread_free(cfg);
	continue;
}

case OPT_EFENCE_PROTECT:
1375#ifdef USE_EFENCE
	/*
	 * This flag was already processed at the
	 * start of main().  While it isn't immutable,
	 * having it apply to all mallocs() is
	 * presumably better.
	 */
	passert(EF_PROTECT_BELOW)({ _Bool assertion__ = EF_PROTECT_BELOW; if (!assertion__) { where_t
 here = ({ static const struct where here = { .func = __func__
, .file = "programs/pluto/plutomain.c", .line = 1382, }; &
here; }); const struct logger *logger_ = &failsafe_logger
; llog_passert(logger_, here, "%s", "EF_PROTECT_BELOW"); } (void
) 1; });
	passert(EF_PROTECT_FREE)({ _Bool assertion__ = EF_PROTECT_FREE; if (!assertion__) { where_t
 here = ({ static const struct where here = { .func = __func__
, .file = "programs/pluto/plutomain.c", .line = 1383, }; &
here; }); const struct logger *logger_ = &failsafe_logger
; llog_passert(logger_, here, "%s", "EF_PROTECT_FREE"); } (void
) 1; });
1384#else
	llog(RC_LOG, logger, "efence support is not enabled; option --efence-protect ignored");
1386#endif
	continue;

case OPT_DEBUG:
{
	lmod_t mod = empty_lmod;
	if (lmod_arg(&mod, &debug_lmod_info, optarg, true1/*enable*/)) {
		cur_debugging = lmod(cur_debugging, mod);
	} else {
		llog(RC_LOG, logger, "unrecognized --debug '%s' option ignored",
			    optarg);
	}
	continue;
}

case OPT_IMPAIR:
{
	struct whack_impair impairment;
	switch (parse_impair(optarg, &impairment, true1, logger)) {
	case IMPAIR_OK:
		if (!process_impair(&impairment, NULL((void*)0), true1, logger)) {
			fatal_opt(longindex, logger, "not valid from the command line");
		}
		continue;
	case IMPAIR_ERROR:
		/* parse_impair() printed error */
		exit(PLUTO_EXIT_FAIL);
	case IMPAIR_HELP:
		/* parse_impair() printed error */
		exit(PLUTO_EXIT_OK);
	}
	continue;
}

default:
	bad_case(c)libreswan_bad_case("c", (c), ({ static const struct where here
 = { .func = __func__, .file = "programs/pluto/plutomain.c", .
line = 1421, }; &here; }));
}
}

/*
* Anything (aka an argument) after all options consumed?
*/
if (optind != argc) {
15
←
Assuming 'optind' is equal to 'argc'→
16
←
Taking false branch→
llog(RC_LOG, logger, "unexpected trailing argument: %s", argv[optind]);
/* not exit_pluto because we are not initialized yet */
exit(PLUTO_EXIT_FAIL);
}

if (chdir(coredir) == -1) {
17
←
Assuming the condition is false→
18
←
Taking false branch→
int e = errno(*__errno_location ());

llog(RC_LOG, logger, "pluto: warning: chdir(\"%s\") to dumpdir failed (%d: %s)",
	coredir, e, strerror(e));
}

oco = lsw_init_options();

if (!selftest_only18.1
'selftest_only' is false
)
19
←
Taking true branch→
lockfd = create_lock(logger);
20
←
Calling 'create_lock'→
else
lockfd = 0;

/* select between logging methods */

if (log_to_stderr_desired || log_to_file_desired)
log_to_syslog = false0;
if (!log_to_stderr_desired)
log_to_stderr = false0;

/*
* create control socket.
* We must create it before the parent process returns so that
* there will be no race condition in using it.  The easiest
* place to do this is before the daemon fork.
*/
if (!selftest_only) {
diag_t d = init_ctl_socket(logger);
if (d != NULL((void*)0)) {
	fatal_diag(PLUTO_EXIT_SOCKET_FAIL, logger, &d, "%s", "");
}
}

/* If not suppressed, do daemon fork */
if (fork_desired) {
1470#if USE_DAEMON0
if (daemon(TRUE1, true1) < 0) {
	fatal_errno(PLUTO_EXIT_FORK_FAIL, logger, "daemon failed");
}
/*
 * Parent just exits, so need to fill in our own PID
 * file.  This is racy, since the file won't be
 * created until after the parent has exited.
 *
 * Since "ipsec start" invokes pluto with --nofork, it
 * is probably safer to leave this feature disabled
 * then implement it using the daemon call.
 */
(void) fill_lock(lockfd, getpid());
1484#elif USE_FORK1
{
	pid_t pid = fork();

	if (pid < 0) {
		fatal_errno(PLUTO_EXIT_FORK_FAIL, logger, errno(*__errno_location ()),
			    "fork failed");
	}

	if (pid == 0) {
		/*
		 * parent fills in the PID.
		 */
		close(lockfd);
	} else {
		/*
		 * parent: die, after filling PID into lock
		 * file.
		 * must not use exit_pluto: lock would be
		 * removed!
		 */
		exit(fill_lock(lockfd, pid) ? 0 : 1);
	}
}
1508#else
fatal(PLUTO_EXIT_FORK_FAIL, logger, "fork/daemon not supported; specify --nofork");
1510#endif
if (setsid() < 0) {
	fatal_errno(PLUTO_EXIT_FAIL, logger, errno(*__errno_location ()),
		    "setsid() failed in main()");
}
} else {
/* no daemon fork: we have to fill in lock file */
(void) fill_lock(lockfd, getpid());

if (isatty(fileno(stdoutstdout))) {
	fprintf(stdoutstdout, "Pluto initialized\n");
	fflush(stdoutstdout);
}
}

/*
* Close stdin, stdout, and when not needed, stderr.  This
* should just leave CTL_FD.
*
* Follow that by directing the closed file descriptors at
* /dev/null.  UNIX always uses the lowest file descriptor
* when opening a file.
*/
close(STDIN_FILENO0);/*stdin*/
close(STDOUT_FILENO1);/*stdout*/
if (!log_to_stderr) {
close(STDERR_FILENO2); /*stderr*/
}
/* make sure that stdin, stdout, stderr are reserved */
passert(open("/dev/null", O_RDONLY) == STDIN_FILENO)({ _Bool assertion__ = open("/dev/null", 00) == 0; if (!assertion__
) { where_t here = ({ static const struct where here = { .func
 = __func__, .file = "programs/pluto/plutomain.c", .line = 1539
, }; &here; }); const struct logger *logger_ = &failsafe_logger
; llog_passert(logger_, here, "%s", "open(\"/dev/null\", 00) == 0"
); } (void) 1; });
/* open("/dev/null", O_WRONLY) == STDOUT_FILENO? */
passert(dup2(0, STDOUT_FILENO) == STDOUT_FILENO)({ _Bool assertion__ = dup2(0, 1) == 1; if (!assertion__) { where_t
 here = ({ static const struct where here = { .func = __func__
, .file = "programs/pluto/plutomain.c", .line = 1541, }; &
here; }); const struct logger *logger_ = &failsafe_logger
; llog_passert(logger_, here, "%s", "dup2(0, 1) == 1"); } (void
) 1; });
/* dup2(STDOUT_FILENO, STDERR_FILENO) == STDERR_FILENO? */
passert(log_to_stderr || dup2(0, STDERR_FILENO) == STDERR_FILENO)({ _Bool assertion__ = log_to_stderr || dup2(0, 2) == 2; if (
!assertion__) { where_t here = ({ static const struct where here
 = { .func = __func__, .file = "programs/pluto/plutomain.c", .
line = 1543, }; &here; }); const struct logger *logger_ =
 &failsafe_logger; llog_passert(logger_, here, "%s", "log_to_stderr || dup2(0, 2) == 2"
); } (void) 1; });

/*
* Check for no unexpected file descriptors.
*/
if (DBGP(DBG_BASE)(cur_debugging & (((lset_t)1 << (DBG_BASE_IX))))) {/* even set? */
for (int fd = getdtablesize() - 1; fd >= 0; fd--) {
	if (fd == ctl_fd ||
	    fd == STDIN_FILENO0 ||
	    fd == STDOUT_FILENO1 ||
	    fd == STDERR_FILENO2) {
		continue;
	}
	struct stat s;
	if (fstat(fd, &s) == 0) {
		llog(RC_LOG_SERIOUS, logger, "pluto: unexpected open file descriptor %d", fd);
	}
}
}

/*
* Initialize logging then switch to the real logger.
*/
pluto_init_log(log_param);
struct logger global_logger = GLOBAL_LOGGER(null_fd)(struct logger) { .where = ({ static const struct where here =
 { .func = __func__, .file = "programs/pluto/plutomain.c", .line
 = 1567, }; &here; }), .global_whackfd = ((struct fd *) (
(void*)0)), .object = ((void*)0), .object_vec = &logger_global_vec
, };
/*
* The string_logger() dbg_alloc() message went down a rabit
* hole (aka the console) so fake one up here.
*/
dbg_alloc("logger", logger, HERE({ static const struct where here = { .func = __func__, .file
 = "programs/pluto/plutomain.c", .line = 1572, }; &here; }
));
free_logger(&logger, HERE({ static const struct where here = { .func = __func__, .file
 = "programs/pluto/plutomain.c", .line = 1573, }; &here; }
));
logger = &global_logger;

init_constants();
init_pluto_constants();

pluto_init_nss(oco->nssdir, logger);
if (libreswan_fipsmode()) {
/*
 * clear out --debug-crypt if set
 *
 * impairs are also not allowed but cannot come in via
 * ipsec.conf, only whack
 */
if (cur_debugging & DBG_PRIVATE((lset_t)1 << (DBG_PRIVATE_IX))) {
	cur_debugging &= ~DBG_PRIVATE((lset_t)1 << (DBG_PRIVATE_IX));
	llog(RC_LOG_SERIOUS, logger, "FIPS mode: debug-private disabled as such logging is not allowed");
}
/*
 * clear out --debug-crypt if set
 *
 * impairs are also not allowed but cannot come in via
 * ipsec.conf, only whack
 */
if (cur_debugging & DBG_CRYPT((lset_t)1 << (DBG_CRYPT_IX))) {
	cur_debugging &= ~DBG_CRYPT((lset_t)1 << (DBG_CRYPT_IX));
	llog(RC_LOG_SERIOUS, logger, "FIPS mode: debug-crypt disabled as such logging is not allowed");
}
}

init_crypt_symkey(logger);

/*
* If impaired, force the mode change; and verify the
* consequences.  Always run the tests as combinations such as
* NSS in fips mode but as out of it could be bad.
*/

if (impair.force_fips) {
llog(RC_LOG, logger, "IMPAIR: forcing FIPS checks to true to emulate FIPS mode");
lsw_set_fips_mode(LSW_FIPS_ON);
}

bool_Bool nss_fips_mode = PK11_IsFIPS();
if (libreswan_fipsmode()) {
llog(RC_LOG, logger, "FIPS mode enabled for pluto daemon");
if (nss_fips_mode) {
	llog(RC_LOG, logger, "NSS library is running in FIPS mode");
} else {
	fatal(PLUTO_EXIT_FIPS_FAIL, logger, "pluto in FIPS mode but NSS library is not");
}
} else {
llog(RC_LOG, logger, "FIPS mode disabled for pluto daemon");
if (nss_fips_mode) {
	llog(RC_LOG_SERIOUS, logger, "Warning: NSS library is running in FIPS mode");
}
}

if (ocsp_enable) {
/* may not return */
diag_t d = init_nss_ocsp(ocsp_uri, ocsp_trust_name,
			 ocsp_timeout, ocsp_strict, ocsp_cache_size,
			 ocsp_cache_min_age, ocsp_cache_min_age,
			 (ocsp_method == OCSP_METHOD_POST), logger);
if (d != NULL((void*)0)) {
	fatal_diag(PLUTO_EXIT_NSS_FAIL, logger, &d, "initializing NSS OCSP failed: ");
}
llog(RC_LOG, logger, "NSS OCSP started");
}

1643#ifdef FIPS_CHECK
llog(RC_LOG, logger, "FIPS HMAC integrity support [enabled]");
bool_Bool fips_files = FIPSCHECK_verify_files(fips_package_files);
if (fips_files) {
llog(RC_LOG, logger, "FIPS HMAC integrity verification self-test passed");
} else if (libreswan_fipsmode()) {
fatal(PLUTO_EXIT_FIPS_FAIL, logger, "FIPS HMAC integrity verification self-test FAILED");
} else {
llog(RC_LOG_SERIOUS, logger, "FIPS HMAC integrity verification self-test FAILED");
}
1653#else
llog(RC_LOG, logger, "FIPS HMAC integrity support [disabled]");
1655#endif

1657#ifdef HAVE_LIBCAP_NG1
/*
* Drop capabilities - this generates a false positive valgrind warning
* See: http://marc.info/?l=linux-security-module&m=125895232029657
*
* We drop these after creating the pluto socket or else we can't
* create a socket if the parent dir is non-root (eg openstack)
*/
capng_clear(CAPNG_SELECT_BOTH);

capng_updatev(CAPNG_ADD, CAPNG_EFFECTIVE | CAPNG_PERMITTED,
CAP_NET_BIND_SERVICE10, CAP_NET_ADMIN12, CAP_NET_RAW13,
CAP_IPC_LOCK14, CAP_AUDIT_WRITE29,
/* for google authenticator pam */
CAP_SETGID6, CAP_SETUID7,
CAP_DAC_READ_SEARCH2,
-1);
/*
* We need to retain some capabilities for our children (updown):
* CAP_NET_ADMIN to change routes
* (we also need it for some setsockopt() calls in main process)
* CAP_NET_RAW for iptables -t mangle
* CAP_DAC_READ_SEARCH for pam / google authenticator
*
*/
capng_updatev(CAPNG_ADD, CAPNG_BOUNDING_SET, CAP_NET_ADMIN12, CAP_NET_RAW13,
	CAP_DAC_READ_SEARCH2, -1);
capng_apply(CAPNG_SELECT_BOTH);
llog(RC_LOG, logger, "libcap-ng support [enabled]");
1686#else
llog(RC_LOG, logger, "libcap-ng support [disabled]");
1688#endif

1690#ifdef USE_LINUX_AUDIT1
linux_audit_init(log_to_audit, logger);
1692#else
llog(RC_LOG, logger, "Linux audit support [disabled]");
1694#endif

{
const char *vc = ipsec_version_code();
llog(RC_LOG, logger, "Starting Pluto (Libreswan Version %s%s) pid:%u",
	vc, compile_time_interop_options, getpid());
}

llog(RC_LOG, logger, "core dump dir: %s", coredir);
if (oco->secretsfile && *oco->secretsfile)
llog(RC_LOG, logger, "secrets file: %s", oco->secretsfile);

llog(RC_LOG, logger, leak_detective ?
"leak-detective enabled" : "leak-detective disabled");

llog(RC_LOG, logger, "NSS crypto [enabled]");

1711#ifdef USE_PAM_AUTH1
llog(RC_LOG, logger, "XAUTH PAM support [enabled]");
1713#else
llog(RC_LOG, logger, "XAUTH PAM support [disabled]");
1715#endif

/*
* Log impair-* functions that were enabled
*/
if (have_impairments()) {
LLOG_JAMBUF(RC_LOG, logger, buf)for (char lswbuf[((size_t)1024)], *lswbuf_ = lswbuf; lswbuf_ !=
 ((void*)0); lswbuf_ = ((void*)0)) for (struct jambuf jambuf =
 array_as_jambuf((lswbuf), sizeof(lswbuf)), *buf = &jambuf
; buf != ((void*)0); buf = ((void*)0)) for (({ if (((RC_LOG) &
 NO_PREFIX) == ((lset_t)0) && (((RC_LOG) & STREAM_MASK
) != DEBUG_STREAM || (cur_debugging & (((lset_t)1 <<
 (DBG_ADD_PREFIX_IX)))))) { (logger)->object_vec->jam_object_prefix
(buf, (logger)->object); } }); buf != ((void*)0); jambuf_to_logger
(buf, (logger), RC_LOG), buf = ((void*)0)) {
	jam(buf, "Warning: impairments enabled: ");
	jam_impairments(buf, "+");
}
}

1727/* Initialize all of the various features */

init_state_db();
init_connection_db();
init_server_fork();
init_server(logger);

init_rate_log();
init_nat_traversal(keep_alive, logger);

init_virtual_ip(virtual_private, logger);
/* obsoleted by nss code: init_rnd_pool(); */
init_root_certs();
init_secret(logger);
1741#ifdef USE_IKEv11
init_ikev1(logger);
1743#endif
init_ikev2();
init_states();
init_revival();
init_connections();
init_host_pair();
init_ike_alg(logger);
test_ike_alg(logger);

if (selftest_only) {
/*
 * skip pluto_exit()
 * Not all components were initialized and
 * no lock files were created.
 */
exit(PLUTO_EXIT_OK);
}

start_server_helpers(nhelpers, logger);
init_kernel(logger);
init_vendorid(logger);
1764#if defined(LIBCURL1) || defined(LIBLDAP)
start_crl_fetch_helper(logger);
1766#endif
init_labeled_ipsec(logger);
1768#ifdef USE_SYSTEMD_WATCHDOG
pluto_sd_init(logger);
1770#endif

1772#ifdef USE_DNSSEC1
{
diag_t d = unbound_event_init(get_pluto_event_base(), do_dnssec,
			      pluto_dnssec_rootfile, pluto_dnssec_trusted,
			      logger/*for-warnings*/);
if (d != NULL((void*)0)) {
	fatal_diag(PLUTO_EXIT_UNBOUND_FAIL, logger, &d, "%s", "");
}
}
1781#endif

run_server(conffile, logger);
1784}

1786void show_setup_plutomain(struct show *s)
1787{
show_separator(s);
show_comment(s, "config setup options:");
show_separator(s);
show_comment(s, "configdir=%s, configfile=%s, secrets=%s, ipsecdir=%s",
oco->confdir,
conffile, /* oco contains only a copy of hardcoded default */
oco->secretsfile,
oco->confddir);

show_comment(s, "nssdir=%s, dumpdir=%s, statsbin=%s",
oco->nssdir,
coredir,
pluto_stats_binary == NULL((void*)0) ? "unset" :  pluto_stats_binary);

1802#ifdef USE_DNSSEC1
show_comment(s, "dnssec-rootkey-file=%s, dnssec-trusted=%s",
pluto_dnssec_rootfile == NULL((void*)0) ? "<unset>" : pluto_dnssec_rootfile,
pluto_dnssec_trusted == NULL((void*)0) ? "<unset>" : pluto_dnssec_trusted);
1806#endif

show_comment(s, "sbindir=%s, libexecdir=%s",
IPSEC_SBINDIR"/usr/local/sbin",
IPSEC_EXECDIR"/usr/local/libexec/ipsec");

show_comment(s, "pluto_version=%s, pluto_vendorid=%s, audit-log=%s",
ipsec_version_code(),
pluto_vendorid,
bool_str(log_to_audit));

show_comment(s,
"nhelpers=%d, uniqueids=%s, "
"dnssec-enable=%s, "
"logappend=%s, logip=%s, shuntlifetime=%jds, xfrmlifetime=%jds",
nhelpers,
bool_str(uniqueIDs),
bool_str(do_dnssec),
bool_str(log_append),
bool_str(log_ip),
deltasecs(pluto_shunt_lifetime),
(intmax_t) pluto_xfrmlifetime
);

show_comment(s,
"ddos-cookies-threshold=%d, ddos-max-halfopen=%d, ddos-mode=%s, ikev1-policy=%s",
pluto_ddos_threshold,
pluto_max_halfopen,
(pluto_ddos_mode == DDOS_AUTO) ? "auto" :
	(pluto_ddos_mode == DDOS_FORCE_BUSY) ? "busy" : "unlimited",
pluto_ikev1_pol == GLOBAL_IKEv1_ACCEPT ? "accept" :
	pluto_ikev1_pol == GLOBAL_IKEv1_REJECT ? "reject" : "drop");

show_comment(s,
"ikebuf=%d, msg_errqueue=%s, crl-strict=%s, crlcheckinterval=%jd, listen=%s, nflog-all=%d",
pluto_sock_bufsize,
bool_str(pluto_sock_errqueue),
bool_str(crl_strict),
deltasecs(crl_check_interval),
pluto_listen != NULL((void*)0) ? pluto_listen : "<any>",
pluto_nflog_group
);

show_comment(s,
"ocsp-enable=%s, ocsp-strict=%s, ocsp-timeout=%d, ocsp-uri=%s",
bool_str(ocsp_enable),
bool_str(ocsp_strict),
ocsp_timeout,
ocsp_uri != NULL((void*)0) ? ocsp_uri : "<unset>"
);
show_comment(s,
"ocsp-trust-name=%s",
ocsp_trust_name != NULL((void*)0) ? ocsp_trust_name : "<unset>"
);

show_comment(s,
"ocsp-cache-size=%d, ocsp-cache-min-age=%d, ocsp-cache-max-age=%d, ocsp-method=%s",
ocsp_cache_size, ocsp_cache_min_age, ocsp_cache_max_age,
ocsp_method == OCSP_METHOD_GET ? "get" : "post"
);

show_comment(s,
"global-redirect=%s, global-redirect-to=%s",
enum_name(&allow_global_redirect_names, global_redirect),
strlen(global_redirect_to()) > 0 ? global_redirect_to() : "<unset>"
);

1873#ifdef HAVE_LABELED_IPSEC1
show_comment(s, "secctx-attr-type=%d", secctx_attr_type);
1875#else
show_comment(s, "secctx-attr-type=<unsupported>");
1877#endif
1878}