netd: Fix all clang-tidy errors in tests

Test: m netd_integration_test
Change-Id: I03752f112e73672935d802da3dcbcac7c2b911da
diff --git a/tests/binder_test.cpp b/tests/binder_test.cpp
index d7df52d..689e2e6 100644
--- a/tests/binder_test.cpp
+++ b/tests/binder_test.cpp
@@ -150,9 +150,9 @@
 
 static std::vector<std::string> runCommand(const std::string& command) {
     std::vector<std::string> lines;
-    FILE *f;
 
-    if ((f = popen(command.c_str(), "r")) == nullptr) {
+    FILE *f = popen(command.c_str(), "r");  // NOLINT(cert-env33-c)
+    if (f == nullptr) {
         perror("popen");
         return lines;
     }
@@ -186,9 +186,9 @@
 
 static bool iptablesRuleExists(const char *binary,
                                const char *chainName,
-                               const std::string expectedRule) {
+                               const std::string& expectedRule) {
     std::vector<std::string> rules = listIptablesRule(binary, chainName);
-    for(std::string &rule: rules) {
+    for (const auto& rule : rules) {
         if(rule.find(expectedRule) != std::string::npos) {
             return true;
         }
@@ -439,7 +439,7 @@
     std::string prefix = StringPrintf("%" PRIu32 ":", priority);
     std::string suffix = StringPrintf(" iif lo uidrange %d-%d %s\n",
             range.getStart(), range.getStop(), action.c_str());
-    for (std::string line : rules) {
+    for (const auto& line : rules) {
         if (android::base::StartsWith(line, prefix) && android::base::EndsWith(line, suffix)) {
             return true;
         }
@@ -538,7 +538,7 @@
 
 // Create a socket pair that isLoopbackSocket won't think is local.
 void BinderTest::fakeRemoteSocketPair(int *clientSocket, int *serverSocket, int *acceptedSocket) {
-    *serverSocket = socket(AF_INET6, SOCK_STREAM, 0);
+    *serverSocket = socket(AF_INET6, SOCK_STREAM | SOCK_CLOEXEC, 0);
     struct sockaddr_in6 server6 = { .sin6_family = AF_INET6, .sin6_addr = sTun.dstAddr() };
     ASSERT_EQ(0, bind(*serverSocket, (struct sockaddr *) &server6, sizeof(server6)));
 
@@ -546,13 +546,13 @@
     ASSERT_EQ(0, getsockname(*serverSocket, (struct sockaddr *) &server6, &addrlen));
     ASSERT_EQ(0, listen(*serverSocket, 10));
 
-    *clientSocket = socket(AF_INET6, SOCK_STREAM, 0);
+    *clientSocket = socket(AF_INET6, SOCK_STREAM | SOCK_CLOEXEC, 0);
     struct sockaddr_in6 client6 = { .sin6_family = AF_INET6, .sin6_addr = sTun.srcAddr() };
     ASSERT_EQ(0, bind(*clientSocket, (struct sockaddr *) &client6, sizeof(client6)));
     ASSERT_EQ(0, connect(*clientSocket, (struct sockaddr *) &server6, sizeof(server6)));
     ASSERT_EQ(0, getsockname(*clientSocket, (struct sockaddr *) &client6, &addrlen));
 
-    *acceptedSocket = accept(*serverSocket, (struct sockaddr *) &server6, &addrlen);
+    *acceptedSocket = accept4(*serverSocket, (struct sockaddr *) &server6, &addrlen, SOCK_CLOEXEC);
     ASSERT_NE(-1, *acceptedSocket);
 
     ASSERT_EQ(0, memcmp(&client6, &server6, sizeof(client6)));
@@ -890,12 +890,13 @@
     }
 }
 
-void addTetherCounterValues(const char *path, std::string if1, std::string if2, int byte, int pkt) {
+void addTetherCounterValues(const char* path, const std::string& if1, const std::string& if2,
+                            int byte, int pkt) {
     runCommand(StringPrintf("%s -w -A tetherctrl_counters -i %s -o %s -j RETURN -c %d %d",
                             path, if1.c_str(), if2.c_str(), pkt, byte));
 }
 
-void delTetherCounterValues(const char *path, std::string if1, std::string if2) {
+void delTetherCounterValues(const char* path, const std::string& if1, const std::string& if2) {
     runCommand(StringPrintf("%s -w -D tetherctrl_counters -i %s -o %s -j RETURN",
                             path, if1.c_str(), if2.c_str()));
     runCommand(StringPrintf("%s -w -D tetherctrl_counters -i %s -o %s -j RETURN",