lib/list.c: realloc(3) and memmove(3) to prevent memory leaks

lib/Makefile.am

@@ -218,6 +218,8 @@ libshadow_la_SOURCES = \
 	string/strcmp/strneq.h \
 	string/strcmp/strprefix.c \
 	string/strcmp/strprefix.h \
+	string/strcpy/memmove.c \
+	string/strcpy/memmove.h \
 	string/strcpy/stpecpy.c \
 	string/strcpy/stpecpy.h \
 	string/strcpy/strncat.c \

lib/list.c

@@ -8,31 +8,29 @@
 
 #include "config.h"
 
-#ident "$Id$"
+#include <stddef.h>
+#include <string.h>
 
 #include <assert.h>
 
 #include "alloc/malloc.h"
+#include "alloc/realloc.h"
 #include "prototypes.h"
 #include "defines.h"
 #include "string/strchr/strchrcnt.h"
 #include "string/strcmp/streq.h"
+#include "string/strcpy/memmove.h"
 #include "string/strdup/strdup.h"
 #include "string/strtok/strsep2ls.h"
 
 
 /*
  * add_list - add a member to a list of group members
- *
- *	the array of member names is searched for the new member
- *	name, and if not present it is added to a freshly allocated
- *	list of users.
  */
 /*@only@*/char **
 add_list(/*@returned@*/ /*@only@*/char **list, const char *member)
 {
 	int i;
-	char **tmp;
 
 	assert (NULL != member);
 	assert (NULL != list);
@@ -41,91 +39,39 @@ add_list(/*@returned@*/ /*@only@*/char **list, const char *member)
 	 * Scan the list for the new name.  Return the original list
 	 * pointer if it is present.
 	 */
-
 	for (i = 0; list[i] != NULL; i++) {
 		if (streq(list[i], member)) {
 			return list;
 		}
 	}
 
-	/*
-	 * Allocate a new list pointer large enough to hold all the
-	 * old entries, and the new entries as well.
-	 */
-
-	tmp = xmalloc_T(i + 2, char *);
-
-	/*
-	 * Copy the original list to the new list, then append the
-	 * new member and NULL terminate the result.  This new list
-	 * is returned to the invoker.
-	 */
-
-	for (i = 0; list[i] != NULL; i++) {
-		tmp[i] = list[i];
-	}
-
-	tmp[i] = xstrdup (member);
-	tmp[i+1] = NULL;
+	list = xrealloc_T(list, i + 2, char *);
+	list[i] = xstrdup(member);
+	list[i+1] = NULL;
 
-	return tmp;
+	return list;
 }
 
 /*
  * del_list - delete a member from a list of group members
- *
- *	the array of member names is searched for the old member
- *	name, and if present it is deleted from a freshly allocated
- *	list of users.
  */
-
 /*@only@*/char **
 del_list(/*@returned@*/ /*@only@*/char **list, const char *member)
 {
-	int i, j;
-	char **tmp;
+	int  n, m;
 
 	assert (NULL != member);
 	assert (NULL != list);
 
-	/*
-	 * Scan the list for the old name.  Return the original list
-	 * pointer if it is not present.
-	 */
-
-	for (i = j = 0; list[i] != NULL; i++) {
-		if (!streq(list[i], member)) {
-			j++;
-		}
-	}
-
-	if (j == i) {
-		return list;
-	}
-
-	/*
-	 * Allocate a new list pointer large enough to hold all the
-	 * old entries.
-	 */
-
-	tmp = xmalloc_T(j + 1, char *);
+	do {
+		for (n = 0; list[n] != NULL; n++)
+			continue;
+		for (m = 0; list[m] != NULL && !streq(list[m], member); m++)
+			continue;
+		memmove_T(&list[m], &list[m+1], n-m, char *);
+	} while (m != n);
 
-	/*
-	 * Copy the original list except the deleted members to the
-	 * new list, then NULL terminate the result.  This new list
-	 * is returned to the invoker.
-	 */
-
-	for (i = j = 0; list[i] != NULL; i++) {
-		if (!streq(list[i], member)) {
-			tmp[j] = list[i];
-			j++;
-		}
-	}
-
-	tmp[j] = NULL;
-
-	return tmp;
+	return xrealloc_T(list, n+1, char *);
 }
 
 /*

lib/string/README

@@ -207,6 +207,9 @@ strcpy/ - String copying
     MEMCPY()
 	Like memcpy(3), but takes two arrays.
 
+    memmove_T()
+	Like memmove(3), but type safe.
+
 sprintf/ - Formatted string creation
 
     aprintf()

lib/string/strcpy/memmove.c

@@ -0,0 +1,7 @@
+// SPDX-FileCopyrightText: 2025, Alejandro Colomar <alx@kernel.org>
+// SPDX-License-Identifier: BSD-3-Clause
+
+
+#include "config.h"
+
+#include "string/strcpy/memmove.h"

lib/string/strcpy/memmove.h

@@ -0,0 +1,26 @@
+// SPDX-FileCopyrightText: 2025, Alejandro Colomar <alx@kernel.org>
+// SPDX-License-Identifier: BSD-3-Clause
+
+
+#ifndef SHADOW_INCLUDE_LIB_STRING_STRCPY_MEMMOVE_H_
+#define SHADOW_INCLUDE_LIB_STRING_STRCPY_MEMMOVE_H_
+
+
+#include "config.h"
+
+#include <string.h>
+
+#include "sizeof.h"
+
+
+// memmove_T - memory move type-safe
+#define memmove_T(dst, src, n, T)   memmove_T_(dst, src, n, typeas(T))
+#define memmove_T_(dst, src, n, T)                                    \
+({                                                                    \
+	_Generic(dst, T *: (void)0);                                  \
+	_Generic(src, T *: (void)0);                                  \
+	(T *){memmove(dst, src, (n) * sizeof(T))};                    \
+})
+
+
+#endif  // include guard