From 247e8890068925abec384c72cd3b1326fc5a1434 Mon Sep 17 00:00:00 2001
From: kento2 <kento@placeq.com>
Date: Wed, 9 Sep 2026 20:02:39 +0200
Subject: [PATCH] .

---
 example.service/trace | 91 -------------------------------------------
 nobotgate.c           |  7 ++--
 parse_token.c         |  1 +
 3 files changed, 5 insertions(+), 94 deletions(-)
 delete mode 100644 example.service/trace

diff --git a/example.service/trace b/example.service/trace
deleted file mode 100644
index dbbc145..0000000
--- a/example.service/trace
+++ /dev/null
@@ -1,91 +0,0 @@
-2783  execve("/usr/bin/envuidgid", ["envuidgid", "www", "tcpserver", "-U", "127.0.0.1", "80"], 0x7ffed7055678 /* 11 vars */) = 0
-2783  brk(NULL)                         = 0x558000b69000
-2783  access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
-2783  openat(AT_FDCWD</home/a/src/kento2/nobotgate/example.service>, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3</etc/ld.so.cache>
-2783  fstat(3</etc/ld.so.cache>, {st_mode=S_IFREG|0644, st_size=129031, ...}) = 0
-2783  mmap(NULL, 129031, PROT_READ, MAP_PRIVATE, 3</etc/ld.so.cache>, 0) = 0x7f13d3dfa000
-2783  close(3</etc/ld.so.cache>)        = 0
-2783  mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13d3df8000
-2783  openat(AT_FDCWD</home/a/src/kento2/nobotgate/example.service>, "/usr/lib/libc.so.6", O_RDONLY|O_CLOEXEC) = 3</usr/lib/libc.so.6>
-2783  read(3</usr/lib/libc.so.6>, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300\255\2\0\0\0\0\0@\0\0\0\0\0\0\08\264\301\0\0\0\0\0\0\0\0\0@\08\0\16\0@\0G\0F\0\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\20\3\0\0\0\0\0\0\20\3\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\240q\32\0\0\0\0\0\240q\32\0\0\0\0\0\240q\32\0\0\0\0\0 \0\0\0\0\0\0\0 \0\0\0\0\0\0\0 \0\0\0\0\0\0\0\1\0\0\0\4\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\210t\2\0\0\0\0\0\210t\2\0\0\0\0\0\0\20\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\200\2\0\0\0\0\0\0\200\2\0\0\0\0\0"..., 832) = 832
-2783  pread64(3</usr/lib/libc.so.6>, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\20\3\0\0\0\0\0\0\20\3\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\240q\32\0\0\0\0\0\240q\32\0\0\0\0\0\240q\32\0\0\0\0\0 \0\0\0\0\0\0\0 \0\0\0\0\0\0\0 \0\0\0\0\0\0\0\1\0\0\0\4\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\210t\2\0\0\0\0\0\210t\2\0\0\0\0\0\0\20\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\200\2\0\0\0\0\0\0\200\2\0\0\0\0\0\0\200\2\0\0\0\0\0\235\216\25\0\0\0\0\0\235\216\25\0\0\0\0\0\0\20\0\0\0\0\0\0\1\0\0\0\4\0\0\0\0\20\30\0\0\0\0\0\0\20\30\0\0\0\0\0\0\20\30\0\0\0\0\0"..., 784, 64) = 784
-2783  fstat(3</usr/lib/libc.so.6>, {st_mode=S_IFREG|0755, st_size=12699128, ...}) = 0
-2783  pread64(3</usr/lib/libc.so.6>, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\20\3\0\0\0\0\0\0\20\3\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\240q\32\0\0\0\0\0\240q\32\0\0\0\0\0\240q\32\0\0\0\0\0 \0\0\0\0\0\0\0 \0\0\0\0\0\0\0 \0\0\0\0\0\0\0\1\0\0\0\4\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\210t\2\0\0\0\0\0\210t\2\0\0\0\0\0\0\20\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\200\2\0\0\0\0\0\0\200\2\0\0\0\0\0\0\200\2\0\0\0\0\0\235\216\25\0\0\0\0\0\235\216\25\0\0\0\0\0\0\20\0\0\0\0\0\0\1\0\0\0\4\0\0\0\0\20\30\0\0\0\0\0\0\20\30\0\0\0\0\0\0\20\30\0\0\0\0\0"..., 784, 64) = 784
-2783  mmap(NULL, 2006680, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3</usr/lib/libc.so.6>, 0) = 0x7f13d3c0e000
-2783  mmap(0x7f13d3c36000, 1413120, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3</usr/lib/libc.so.6>, 0x28000) = 0x7f13d3c36000
-2783  mmap(0x7f13d3d8f000, 352256, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3</usr/lib/libc.so.6>, 0x181000) = 0x7f13d3d8f000
-2783  mmap(0x7f13d3de5000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3</usr/lib/libc.so.6>, 0x1d6000) = 0x7f13d3de5000
-2783  mmap(0x7f13d3deb000, 52888, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f13d3deb000
-2783  close(3</usr/lib/libc.so.6>)      = 0
-2783  mmap(NULL, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f13d3c0b000
-2783  arch_prctl(ARCH_SET_FS, 0x7f13d3c0b740) = 0
-2783  set_tid_address(0x7f13d3c0ba10)   = 2783
-2783  set_robust_list(0x7f13d3c0ba20, 24) = 0
-2783  rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = 0
-2783  mprotect(0x7f13d3de5000, 16384, PROT_READ) = 0
-2783  mprotect(0x557fcb203000, 4096, PROT_READ) = 0
-2783  mprotect(0x7f13d3e55000, 8192, PROT_READ) = 0
-2783  prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
-2783  munmap(0x7f13d3dfa000, 129031)    = 0
-2783  getrandom("\x50\xa4\x5b\x1a\x33\xa9\x65\xde", 8, GRND_NONBLOCK) = 8
-2783  brk(NULL)                         = 0x558000b69000
-2783  brk(0x558000b8a000)               = 0x558000b8a000
-2783  socket(AF_UNIX, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3<UNIX-STREAM:[57002340]>
-2783  connect(3<UNIX-STREAM:[57002340]>, {sa_family=AF_UNIX, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
-2783  close(3<UNIX-STREAM:[57002340]>)  = 0
-2783  socket(AF_UNIX, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3<UNIX-STREAM:[57002341]>
-2783  connect(3<UNIX-STREAM:[57002341]>, {sa_family=AF_UNIX, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
-2783  close(3<UNIX-STREAM:[57002341]>)  = 0
-2783  newfstatat(AT_FDCWD</home/a/src/kento2/nobotgate/example.service>, "/etc/nsswitch.conf", {st_mode=S_IFREG|0644, st_size=216, ...}, 0) = 0
-2783  newfstatat(AT_FDCWD</home/a/src/kento2/nobotgate/example.service>, "/", {st_mode=S_IFDIR|0755, st_size=4096, ...}, 0) = 0
-2783  openat(AT_FDCWD</home/a/src/kento2/nobotgate/example.service>, "/etc/nsswitch.conf", O_RDONLY|O_CLOEXEC) = 3</etc/nsswitch.conf>
-2783  fstat(3</etc/nsswitch.conf>, {st_mode=S_IFREG|0644, st_size=216, ...}) = 0
-2783  read(3</etc/nsswitch.conf>, "# /etc/nsswitch.conf\n#\n# See nsswitch.conf(5) for information.\n#\npasswd: \tfiles\ngroup: \t\tfiles\nshadow: \tfiles\n\nhosts: \t\tfiles mdns dns\nnetworks: \tfiles\n\nprotocols: \tfiles\nservices: \tfiles\nethers: \tfiles\nrpc: \t\tfiles\n", 4096) = 216
-2783  read(3</etc/nsswitch.conf>, "", 4096) = 0
-2783  fstat(3</etc/nsswitch.conf>, {st_mode=S_IFREG|0644, st_size=216, ...}) = 0
-2783  close(3</etc/nsswitch.conf>)      = 0
-2783  openat(AT_FDCWD</home/a/src/kento2/nobotgate/example.service>, "/etc/passwd", O_RDONLY|O_CLOEXEC) = 3</etc/passwd>
-2783  fstat(3</etc/passwd>, {st_mode=S_IFREG|0644, st_size=5894, ...}) = 0
-2783  lseek(3</etc/passwd>, 0, SEEK_SET) = 0
-2783  read(3</etc/passwd>, "root:x:0:0:root:/root:/bedrock/cross/bin/sh\nnobody:x:99:99:Unprivileged User:/dev/null:/bedrock/cross/bin/false\nchrony:x:999:999:chrony unprivileged user:/var/lib/chrony:/bedrock/cross/bin/nologin\n_dhcpcd:x:998:998:_dhcpcd unprivileged user:/var/db/dhcpcd:"..., 4096) = 4096
-2783  read(3</etc/passwd>, "6 unprivileged user:/var/empty:/bedrock/cross/bin/nologin\nnixbld7:x:979:952:nixbld7 unprivileged user:/var/empty:/bedrock/cross/bin/nologin\nnixbld8:x:978:952:nixbld8 unprivileged user:/var/empty:/bedrock/cross/bin/nologin\nnixbld9:x:977:952:nixbld9 unprivil"..., 4096) = 1798
-2783  close(3</etc/passwd>)             = 0
-2783  execve("/home/a/.local/bin/tcpserver", ["tcpserver", "-U", "127.0.0.1", "80"], 0x557fcb2047f0 /* 13 vars */) = -1 ENOENT (No such file or directory)
-2783  execve("/bedrock/cross/pin/bin/tcpserver", ["tcpserver", "-U", "127.0.0.1", "80"], 0x557fcb2047f0 /* 13 vars */) = -1 ENOENT (No such file or directory)
-2783  execve("/bedrock/bin/tcpserver", ["tcpserver", "-U", "127.0.0.1", "80"], 0x557fcb2047f0 /* 13 vars */) = -1 ENOENT (No such file or directory)
-2783  execve("/home/a/.nix-profile/bin/tcpserver", ["tcpserver", "-U", "127.0.0.1", "80"], 0x557fcb2047f0 /* 13 vars */) = -1 ENOENT (No such file or directory)
-2783  execve("/nix/var/nix/profiles/default/bin/tcpserver", ["tcpserver", "-U", "127.0.0.1", "80"], 0x557fcb2047f0 /* 13 vars */) = -1 ENOENT (No such file or directory)
-2783  execve("/usr/local/bin/tcpserver", ["tcpserver", "-U", "127.0.0.1", "80"], 0x557fcb2047f0 /* 13 vars */) = -1 ENOENT (No such file or directory)
-2783  execve("/usr/local/sbin/tcpserver", ["tcpserver", "-U", "127.0.0.1", "80"], 0x557fcb2047f0 /* 13 vars */) = -1 ENOENT (No such file or directory)
-2783  execve("/usr/bin/tcpserver", ["tcpserver", "-U", "127.0.0.1", "80"], 0x557fcb2047f0 /* 13 vars */) = 0
-2783  brk(NULL)                         = 0x5605f057b000
-2783  access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
-2783  openat(AT_FDCWD</home/a/src/kento2/nobotgate/example.service>, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3</etc/ld.so.cache>
-2783  fstat(3</etc/ld.so.cache>, {st_mode=S_IFREG|0644, st_size=129031, ...}) = 0
-2783  mmap(NULL, 129031, PROT_READ, MAP_PRIVATE, 3</etc/ld.so.cache>, 0) = 0x7f9752158000
-2783  close(3</etc/ld.so.cache>)        = 0
-2783  mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9752156000
-2783  openat(AT_FDCWD</home/a/src/kento2/nobotgate/example.service>, "/usr/lib/libc.so.6", O_RDONLY|O_CLOEXEC) = 3</usr/lib/libc.so.6>
-2783  read(3</usr/lib/libc.so.6>, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300\255\2\0\0\0\0\0@\0\0\0\0\0\0\08\264\301\0\0\0\0\0\0\0\0\0@\08\0\16\0@\0G\0F\0\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\20\3\0\0\0\0\0\0\20\3\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\240q\32\0\0\0\0\0\240q\32\0\0\0\0\0\240q\32\0\0\0\0\0 \0\0\0\0\0\0\0 \0\0\0\0\0\0\0 \0\0\0\0\0\0\0\1\0\0\0\4\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\210t\2\0\0\0\0\0\210t\2\0\0\0\0\0\0\20\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\200\2\0\0\0\0\0\0\200\2\0\0\0\0\0"..., 832) = 832
-2783  pread64(3</usr/lib/libc.so.6>, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\20\3\0\0\0\0\0\0\20\3\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\240q\32\0\0\0\0\0\240q\32\0\0\0\0\0\240q\32\0\0\0\0\0 \0\0\0\0\0\0\0 \0\0\0\0\0\0\0 \0\0\0\0\0\0\0\1\0\0\0\4\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\210t\2\0\0\0\0\0\210t\2\0\0\0\0\0\0\20\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\200\2\0\0\0\0\0\0\200\2\0\0\0\0\0\0\200\2\0\0\0\0\0\235\216\25\0\0\0\0\0\235\216\25\0\0\0\0\0\0\20\0\0\0\0\0\0\1\0\0\0\4\0\0\0\0\20\30\0\0\0\0\0\0\20\30\0\0\0\0\0\0\20\30\0\0\0\0\0"..., 784, 64) = 784
-2783  fstat(3</usr/lib/libc.so.6>, {st_mode=S_IFREG|0755, st_size=12699128, ...}) = 0
-2783  pread64(3</usr/lib/libc.so.6>, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\20\3\0\0\0\0\0\0\20\3\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\240q\32\0\0\0\0\0\240q\32\0\0\0\0\0\240q\32\0\0\0\0\0 \0\0\0\0\0\0\0 \0\0\0\0\0\0\0 \0\0\0\0\0\0\0\1\0\0\0\4\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\210t\2\0\0\0\0\0\210t\2\0\0\0\0\0\0\20\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\200\2\0\0\0\0\0\0\200\2\0\0\0\0\0\0\200\2\0\0\0\0\0\235\216\25\0\0\0\0\0\235\216\25\0\0\0\0\0\0\20\0\0\0\0\0\0\1\0\0\0\4\0\0\0\0\20\30\0\0\0\0\0\0\20\30\0\0\0\0\0\0\20\30\0\0\0\0\0"..., 784, 64) = 784
-2783  mmap(NULL, 2006680, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3</usr/lib/libc.so.6>, 0) = 0x7f9751f6c000
-2783  mmap(0x7f9751f94000, 1413120, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3</usr/lib/libc.so.6>, 0x28000) = 0x7f9751f94000
-2783  mmap(0x7f97520ed000, 352256, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3</usr/lib/libc.so.6>, 0x181000) = 0x7f97520ed000
-2783  mmap(0x7f9752143000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3</usr/lib/libc.so.6>, 0x1d6000) = 0x7f9752143000
-2783  mmap(0x7f9752149000, 52888, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f9752149000
-2783  close(3</usr/lib/libc.so.6>)      = 0
-2783  mmap(NULL, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9751f69000
-2783  arch_prctl(ARCH_SET_FS, 0x7f9751f69740) = 0
-2783  set_tid_address(0x7f9751f69a10)   = 2783
-2783  set_robust_list(0x7f9751f69a20, 24) = 0
-2783  rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = 0
-2783  mprotect(0x7f9752143000, 16384, PROT_READ) = 0
-2783  mprotect(0x5605de88f000, 4096, PROT_READ) = 0
-2783  mprotect(0x7f97521b3000, 8192, PROT_READ) = 0
-2783  prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
-2783  munmap(0x7f9752158000, 129031)    = 0
-2783  write(2</dev/pts/1<char 136:1>>, "tcpserver: usage: tcpserver [ -461UXpPhHrRoOdDqQv ] [ -c limit ] [ -x rules.cdb ] [ -B banner ] [ -g gid ] [ -u uid ] [ -b backlog ] [ -l localname ] [ -t timeout ] [ -I interface ] host port program\n", 200) = 200
-2783  exit_group(100)                   = ?
-2783  +++ exited with 100 +++
diff --git a/nobotgate.c b/nobotgate.c
index ea279fe..3f8fb0a 100644
--- a/nobotgate.c
+++ b/nobotgate.c
@@ -12,15 +12,16 @@ static stralloc token;
 static char *tokenfile, *cmd_valid, *cmd_invalid;
 
 static void run(void) {
-  char tmp[] = PATH_TMP"/nobotgate.XXXXXX";
+  char tmp[]=PATH_TMP"/nobotgate.XXXXXX";
   int tmpfd;
   char buf[8192];
   buffer b;
   char *cmd;
-  tmpfd = mkstemp(tmp);
+  tmpfd=mkstemp(tmp);
+  if (tmpfd<0) diesys(111,"create temporary file ",tmp);
 
   buffer_init_write(&b,tmpfd,buf,sizeof buf);
-  if (!send_headers(buffer_0, &b))
+  if (!send_headers(buffer_0,&b))
     die(111,"copy stdin to temporary file");
 
   lseek(tmpfd,0,SEEK_SET);
diff --git a/parse_token.c b/parse_token.c
index fb344cc..209c6d6 100644
--- a/parse_token.c
+++ b/parse_token.c
@@ -22,6 +22,7 @@ int parse_token(buffer *b, stralloc *result)
   stralloc line;
   int r;
   stralloc_init(result);
+  stralloc_init(&line);
   for (;;) {
     r=buffer_getnewline_sa(b,&line);
     if (r==0) break;