OSDN Git Service
Rich Felker [Sun, 15 Dec 2013 00:51:48 +0000 (19:51 -0500)]
fix dynamic linker entry point for microblaze
the ABI allows the callee to clobber stack slots that correspond to
arguments passed in registers, so the caller must adjust the stack
pointer to reserve space appropriately. prior to this fix, the argv
array was possibly clobbered by dynamic linker code before passing
control to the main program.
Rich Felker [Fri, 13 Dec 2013 07:25:09 +0000 (02:25 -0500)]
optimize get_current_dir_name to reduce stack bloat
our getcwd already (as an extension) supports allocation of a buffer
when the buffer argument is a null pointer, so there's no need to
duplicate the allocation logic in this wrapper function. duplicating
it is actually harmful in that it doubles the stack usage from
PATH_MAX to 2*PATH_MAX.
Rich Felker [Fri, 13 Dec 2013 07:20:07 +0000 (02:20 -0500)]
use 0 instead of NULL for null pointer constants
and thereby remove otherwise-unnecessary inclusion of stddef.h
Szabolcs Nagy [Thu, 12 Dec 2013 05:09:18 +0000 (05:09 +0000)]
include cleanups: remove unused headers and add feature test macros
Szabolcs Nagy [Thu, 12 Dec 2013 04:18:34 +0000 (04:18 +0000)]
remove an unnecessary check in inet_pton
at most 4 hexadecimal digits are processed in one field so the
value cannot overflow. the netdb.h header was not used.
Szabolcs Nagy [Thu, 12 Dec 2013 03:42:11 +0000 (03:42 +0000)]
math: define _GNU_SOURCE when implementing non-standard math functions
this makes the prototypes in math.h are visible so they are checked agaist
the function definitions
Rich Felker [Sat, 7 Dec 2013 02:59:01 +0000 (21:59 -0500)]
add posix_close, accepted for inclusion in the next issue of POSIX
this is purely a wrapper for close since Linux does not support EINTR
semantics for the close syscall.
Rich Felker [Wed, 4 Dec 2013 23:00:19 +0000 (18:00 -0500)]
remove dependency of version.h on .git/* to avoid errors
the wildcard function in GNU make includes dangling symlinks; if any
exist under the .git directory, they would get added as dependencies,
causing make to exit with an error due to lacking a rule to build the
missing file.
as far as I can tell, git operations which should force version.h to
be rebuilt must all touch the mtime of the top-level .git directory.
Szabolcs Nagy [Wed, 4 Dec 2013 21:39:52 +0000 (21:39 +0000)]
move struct ucred under _GNU_SOURCE in sys/socket.h for clean posix namespace
Szabolcs Nagy [Wed, 4 Dec 2013 21:38:32 +0000 (21:38 +0000)]
fix SHUT_WR typo in sys/socket.h and duplicate definitions of SHUT_*
Szabolcs Nagy [Wed, 4 Dec 2013 21:31:39 +0000 (21:31 +0000)]
fix res_mkquery and res_send prototypes in resolv.h
historically these functions appeared in BSD 4.3 without prototypes,
then in the bind project prototypes were added to resolv.h, but those
were incompatible with the definitions of the implementation.
the bind resolv.h became the defacto api most systems use now, but the
old internal definitions found their way into the linux manuals and thus
into musl.
Rich Felker [Wed, 4 Dec 2013 01:34:36 +0000 (20:34 -0500)]
remove duplicate definition of _PATH_LASTLOG in paths.h
Rich Felker [Wed, 4 Dec 2013 00:01:40 +0000 (19:01 -0500)]
fix mv usage in install.sh to avoid bogus interactive prompting
Rich Felker [Mon, 2 Dec 2013 07:45:10 +0000 (02:45 -0500)]
workaround clang deficiency affecting thread pointer access on powerpc
based on patch by Richard Pennington, who initially reported the
issue.
Rich Felker [Mon, 2 Dec 2013 07:08:41 +0000 (02:08 -0500)]
implement FNM_LEADING_DIR extension flag in fnmatch
previously this flag was defined and accepted as a no-op, possibly
breaking some software that uses it. given the choice to remove the
definition and possibly break applications that were already working,
or simply implement the feature, the latter turned out to be easy
enough to make the decision easy.
in the case where the FNM_PATHNAME flag is also set, this
implementation is clean and essentially optimal. otherwise, it's an
inefficient "brute force" implementation. at some point, when cleaning
up and refactoring this code, I may add a more direct code path for
handling FNM_LEADING_DIR in the non-FNM_PATHNAME case, but at this
point my main interest is avoiding introducing new bugs in the code
that implements the standard fnmatch features specified by POSIX.
Rich Felker [Mon, 2 Dec 2013 07:06:52 +0000 (02:06 -0500)]
remove now-unnecessary features.h inclusion from fnmatch.h
Rich Felker [Mon, 2 Dec 2013 07:04:58 +0000 (02:04 -0500)]
expose FNM_* extensions in fnmatch.h without _GNU_SOURCE
at least a couple of these are used on BSD too, and the FNM_*
namespace is reserved in fnmatch.h anyway.
Rich Felker [Mon, 2 Dec 2013 04:16:38 +0000 (23:16 -0500)]
fix typos in INSTALL file
Rich Felker [Sun, 1 Dec 2013 22:27:25 +0000 (17:27 -0500)]
add infrastructure to record and report the version of libc.so
this is still experimental and subject to change. for git checkouts,
an attempt is made to record the exact revision to aid in bug reports
and debugging. no version information is recorded in the static libc.a
or binaries it's linked into.
Rich Felker [Sun, 1 Dec 2013 19:36:22 +0000 (14:36 -0500)]
fix fnmatch corner cases related to escaping
the FNM_PATHNAME logic for advancing by /-delimited components was
incorrect when the / character was escaped (i.e. \/), and a final \ at
the end of pattern was not handled correctly.
Szabolcs Nagy [Sun, 1 Dec 2013 17:32:48 +0000 (17:32 +0000)]
fix the end of string matching in fnmatch with FNM_PATHNAME
a '/' in the pattern could be incorrectly matched against the
terminating null byte in the string causing arbitrarily long
sequence of out-of-bounds access in fnmatch("/","",FNM_PATHNAME)
Rich Felker [Sat, 30 Nov 2013 18:33:29 +0000 (13:33 -0500)]
support mix of IPv4 and v6 nameservers in resolv.conf
a v6 socket will only be used if there is at least one v6 nameserver
address. if the kernel lacks v6 support, the code will fall back to
using a v4 socket and requests to v6 servers will silently fail. when
using a v6 socket, v4 addresses are converted to v4-mapped form and
setsockopt is used to ensure that the v6 socket can accept both v4 and
v6 traffic (this is on-by-default on Linux but the default is
configurable in /proc and so it needs to be set explicitly on the
socket level). this scheme avoids increasing resource usage during
lookups and allows the existing network io loop to be used without
modification.
previously, nameservers whose address family did not match the address
family of the first-listed nameserver were simply ignored. prior to
recent __ipparse fixes, they were not ignored but erroneously parsed.
Rich Felker [Fri, 29 Nov 2013 17:45:09 +0000 (12:45 -0500)]
increase TTY_NAME_MAX limit to 32
the old value of 20 was reported by Laurent Bercot as being
insufficient for a reasonable real-world usage case. actual problem
was the internal buffer used by ttyname(), but the implementation of
ttyname uses TTY_NAME_MAX, and for consistency it's best to increase
both. the new value is aligned with glibc.
Rich Felker [Wed, 27 Nov 2013 05:54:03 +0000 (00:54 -0500)]
reject invalid address families in getaddrinfo
subsequent code assumes the address family requested is either
unspecified or one of IPv4/IPv6, and could malfunction if this
constraint is not met, so other address families should be explicitly
rejected.
Rich Felker [Wed, 27 Nov 2013 04:26:37 +0000 (23:26 -0500)]
adjust fallback INFINITY definition for FLT_EVAL_METHOD==2 case
on archs with excess precision, the floating point constant 1e40f may
be evaluated such that it does not actually produce an infinity.
1e5000f is sufficiently large to produce an infinity for all supported
floating point formats. note that this definition of INFINITY is only
used for old or non-GNUC compilers anyway; despite being a portable,
conforming definition, it leads to erroneous warnings on many
compilers and thus using the builtin is preferred.
Rich Felker [Wed, 27 Nov 2013 01:01:21 +0000 (20:01 -0500)]
fix off-by-one length failure in strftime/wcsftime and improve error behavior
these functions were spuriously failing in the case where the buffer
size was exactly the number of bytes/characters to be written,
including null termination. since these functions do not have defined
error conditions other than buffer size, a reasonable application may
fail to check the return value when the format string and buffer size
are known to be valid; such an application could then attempt to use a
non-terminated buffer.
in addition to fixing the bug, I have changed the error handling
behavior so that these functions always null-terminate the output
except in the case where the buffer size is zero, and so that they
always write as many characters as possible before failing, rather
than dropping whole fields that do not fit. this actually simplifies
the logic somewhat anyway.
Szabolcs Nagy [Mon, 25 Nov 2013 23:34:10 +0000 (23:34 +0000)]
remove duplicate includes from dynlink.c, strfmon.c and getaddrinfo.c
Rich Felker [Mon, 25 Nov 2013 02:42:55 +0000 (21:42 -0500)]
restore type of NULL to void * except when used in C++ programs
unfortunately this eliminates the ability of the compiler to diagnose
some dangerous/incorrect usage, but POSIX requires (as an extension to
the C language, i.e. CX shaded) that NULL have type void *. plain C
allows it to be defined as any null pointer constant.
the definition 0L is preserved for C++ rather than reverting to plain
0 to avoid dangerous behavior in non-conforming programs which use
NULL as a variadic sentinel. (it's impossible to use (void *)0 for C++
since C++ lacks the proper implicit pointer conversions, and other
popular alternatives like the GCC __null extension seem non-conforming
to the standard's requirements.)
Michael Forney [Thu, 21 Nov 2013 03:13:41 +0000 (19:13 -0800)]
shadow: Implement fgetspent
Michael Forney [Sun, 24 Nov 2013 06:17:42 +0000 (22:17 -0800)]
shadow: Move spent parsing to internal function
Michael Forney [Sun, 24 Nov 2013 06:33:05 +0000 (22:33 -0800)]
Fix dn_comp prototype and add stub
This function is used by ping6 from iputils.
Michael Forney [Sun, 24 Nov 2013 06:10:10 +0000 (22:10 -0800)]
shadow: Implement putspent
Szabolcs Nagy [Sun, 24 Nov 2013 01:06:38 +0000 (01:06 +0000)]
math: clean up __rem_pio2
- remove the HAVE_EFFICIENT_IRINT case: fn is an exact integer, so
it can be converted to int32_t a bit more efficiently than with a
cast (the rounding mode change can be avoided), but musl does not
support this case on any arch.
- __rem_pio2: use double_t where possible
- __rem_pio2f: use less assignments to avoid stores on i386
- use unsigned int bit manipulation (and union instead of macros)
- use hexfloat literals instead of named constants
Szabolcs Nagy [Sun, 24 Nov 2013 00:34:07 +0000 (00:34 +0000)]
use 0 instead of NULL in headers where NULL is not defined
some macros in sys/mtio.h and syslog.h used NULL without defining it
Szabolcs Nagy [Sat, 23 Nov 2013 23:47:48 +0000 (23:47 +0000)]
add O_TMPFILE flag, new in linux 3.11
definition in linux:
#define O_TMPFILE (__O_TMPFILE | O_DIRECTORY)
where __O_TMPFILE and O_DIRECTORY are arch specific
Szabolcs Nagy [Sat, 23 Nov 2013 23:04:55 +0000 (23:04 +0000)]
add TCP_NOTSENT_LOWAT tcp socket option, new in linux v3.12
Timo Teräs [Mon, 14 Oct 2013 05:28:19 +0000 (08:28 +0300)]
add linux tcp state enums
Timo Teräs [Wed, 31 Jul 2013 09:05:14 +0000 (12:05 +0300)]
add multicast structures from RFC 3678 to netinet/in.h
and use _GNU_SOURCE || _BSD_SOURCE guards for all of the RFC 3678
namespace polluting things like glibc/uclibc does.
Michael Forney [Tue, 5 Nov 2013 05:43:57 +0000 (21:43 -0800)]
Fix dn_expand pointer following
Michael Forney [Tue, 5 Nov 2013 07:34:21 +0000 (23:34 -0800)]
putgrent: Add missing newline
Michael Forney [Tue, 5 Nov 2013 07:34:20 +0000 (23:34 -0800)]
putgrent: Stop writing output on first failure
This way, if an fprintf fails, we get an incomplete group entry rather
than a corrupted one.
Michael Forney [Tue, 5 Nov 2013 05:48:08 +0000 (21:48 -0800)]
strcmp: Remove unnecessary check for *r
If *l == *r && *l, then by transitivity, *r.
rofl0r [Sat, 23 Nov 2013 12:01:53 +0000 (13:01 +0100)]
timeradd/timersub: cast result to void to get rid of warnings
previously:
timersub(&now, t, &diff);
warning: value computed is not used [-Wunused-value]
Rich Felker [Fri, 22 Nov 2013 21:29:31 +0000 (16:29 -0500)]
fix and refactor child reaping logic in wordexp
loop condition was incorrect and confusing and caused an infinite loop
when (broken) applications reaped the pid from a signal handler or
another thread before wordexp's call to waitpid could do so.
Rich Felker [Fri, 22 Nov 2013 20:55:58 +0000 (15:55 -0500)]
fix fd leak and case where fd 1 is already closed in wordexp
Rich Felker [Fri, 22 Nov 2013 20:48:24 +0000 (15:48 -0500)]
fix resource exhaustion and zero-word cases in wordexp
when WRDE_NOSPACE is returned, the we_wordv and we_wordc members must
be valid, because the interface contract allows them to return partial
results.
in the case of zero results (due either to resource exhaustion or a
zero-word input) the we_wordv array still should contain a terminating
null pointer and the initial we_offs null pointers. this is impossible
on resource exhaustion, so a correct application must presumably check
for a null pointer in we_wordv; POSIX however seems to ignore the
issue. the previous code may have crashed under this situation.
Rich Felker [Fri, 22 Nov 2013 20:29:14 +0000 (15:29 -0500)]
improve robustness of wordexp and fix handling of 0-word case
avoid using exit status to determine if a shell error occurred, since
broken programs may install SIGCHLD handlers which reap all zombies,
including ones that don't belong to them. using clone and __WCLONE
does not seem to work for avoiding this problem since exec resets the
exit signal to SIGCHLD.
instead, the new code uses a dummy word at the beginning of the
shell's output, which is ignored, to determine whether the command was
executed successfully. this also fixes a corner case where a word
string containing zero words was interpreted as a single zero-length
word rather than no words at all. POSIX does not seem to require this
case to be supported anyway, though.
in addition, the new code uses the correct retry idiom for waitpid to
ensure that spurious STOP/CONT signals in the child and/or EINTR in
the parent do not prevent successful wait for the child, and blocks
signals in the child.
Szabolcs Nagy [Thu, 21 Nov 2013 01:59:43 +0000 (01:59 +0000)]
add legacy getloadavg api
Rich Felker [Thu, 21 Nov 2013 01:34:33 +0000 (20:34 -0500)]
fix fd leak (missing close-on-exec) in getifaddrs
Szabolcs Nagy [Thu, 21 Nov 2013 01:16:49 +0000 (01:16 +0000)]
math: add (obsolete) bsd drem and finite functions
Szabolcs Nagy [Thu, 21 Nov 2013 01:01:57 +0000 (01:01 +0000)]
math: lgamma cleanup (simpler sin(pi*x) for the negative case)
* simplify sin_pi(x) (don't care about inexact here, the result is
inexact anyway, and x is not so small to underflow)
* in lgammal add the previously removed special case for x==1 and
x==2 (to fix the sign of zero in downward rounding mode)
* only define lgammal on supported long double platforms
* change tgamma so the generated code is a bit smaller
Rich Felker [Wed, 20 Nov 2013 23:28:18 +0000 (18:28 -0500)]
fix the nominal type of LDBL_* limits on archs with ld64
previously these macros wrongly had type double rather than long
double. I see no way an application could detect the error in C99, but
C11's _Generic can trivially detect it.
at the same time, even though these archs do not have excess
precision, the number of decimal places used to represent these
constants has been increased to 21 to be consistent with the decimal
representations used for the DBL_* macros.
Rich Felker [Wed, 20 Nov 2013 22:40:33 +0000 (17:40 -0500)]
write floating point limit constants to 21 significant decimal places
this is enough to produce the correct value even if the constant is
interpreted as 80-bit extended precision, which matters on archs with
excess precision (FLT_EVAL_METHOD==2) under at least some
interpretations of the C standard. the shorter representations, while
correct if converted to the nominal precision at translation time,
could produce an incorrect value at extended precision, yielding
results such as (double)DBL_MAX != DBL_MAX.
rofl0r [Mon, 11 Nov 2013 04:44:47 +0000 (05:44 +0100)]
iswspace: fix handling of 0
Rich Felker [Sat, 9 Nov 2013 22:54:20 +0000 (17:54 -0500)]
fix harmless inconsistency in semtimedop
this should not matter since the reality is that either all the sysv
sem syscalls are individual syscalls, or all of them are multiplexed
on the SYS_ipc syscall (depending on arch). but best to be consistent
anyway.
Rich Felker [Sat, 9 Nov 2013 05:18:57 +0000 (00:18 -0500)]
implement semtimedop
this is a Linux-specific extension to the sysv semaphore api.
Rich Felker [Sat, 9 Nov 2013 05:04:02 +0000 (00:04 -0500)]
adjust sys/wait.h not to produde errors in strict ISO C feature profile
siginfo_t is not available from signal.h when the strict ISO C feature
profile (e.g. passing -std=c99 to gcc without defining any other
feature test macros) is used, but the type is needed to declare
waitid. using sys/wait.h (or any POSIX headers) in strict ISO C mode
is an application bug, but in the interest of compatibility, it's best
to avoid producing gratuitous errors. the simplest fix I could find is
suppressing the declaration of waitid (and also signal.h inclusion,
since it's not needed for anything else) in this case, while still
exposing everything else in sys/wait.h
Rich Felker [Sat, 9 Nov 2013 02:33:42 +0000 (21:33 -0500)]
remove O_NOFOLLOW from __map_file used for time zone file loading
it's not clear why I originally wrote O_NOFOLLOW into this; I suspect
the reason was with an aim of making the function more general for
mapping partially or fully untrusted files provided by the user.
however, the timezone code already precludes use of absolute or
relative pathnames in suid/sgid programs, and disallows .. in
pathnames which are relative to one of the system timezone locations,
so there is no threat of opening a symlink which is not trusted by
appropriate user. since some users may wish to put symbolic links in
the zoneinfo directories to alias timezones, it seems preferable to
allow this.
Rich Felker [Sat, 9 Nov 2013 01:50:59 +0000 (20:50 -0500)]
fix handling of overly-long TZ environment variable values
the rest of the code is not prepared to handle an empty TZ string, so
falling back to __gmt ("GMT"), just as if TZ had been blank or unset,
is the preferable action.
rofl0r [Mon, 4 Nov 2013 17:07:28 +0000 (17:07 +0000)]
timezone parser: fix iteration over search dir paths
try+l points to \0, so only one iteration was ever tried.
rofl0r [Mon, 4 Nov 2013 15:57:51 +0000 (15:57 +0000)]
timezone parser: fix offset to transition table in 64bit code path
we need to skip to the second TZif header, which starts at
skip+44, and then skip another header (20 bytes) plus the following
6 32bit values.
rofl0r [Mon, 4 Nov 2013 15:13:21 +0000 (15:13 +0000)]
fix timezone parser code crashing on 64bit sys
if sizeof(time_t) == 8, this code path was missing the correct
offset into the zoneinfo file, using the header magic to do
offset calculations.
the 6 32bit fields to be read start at offset 20.
Rich Felker [Sat, 2 Nov 2013 08:07:12 +0000 (04:07 -0400)]
fix regression in inet_aton due to misinterpretation of __ipparse return
inet_aton returns a boolean success value, whereas __ipparse returns 0
on success and -1 on failure. also change the conditional in inet_addr
to be consistent with other uses of __ipparse where only negative
values are treated as failure.
Rich Felker [Sat, 2 Nov 2013 00:34:05 +0000 (20:34 -0400)]
simplify faccessat AT_EACCESS path and eliminate resource dependence
now that we're waiting for the exit status of the child process, the
result can be conveyed in the exit status rather than via a pipe.
since the error value might not fit in 7 bits, a table is used to
translate possible meaningful error values to small integers.
Rich Felker [Fri, 1 Nov 2013 21:01:52 +0000 (17:01 -0400)]
fix faccessat AT_EACCESS path not to leave zombie processes
I mistakenly assumed that clone without a signal produced processes
that would not become zombies; however, waitpid with __WCLONE is
required to release their pids.
Rich Felker [Wed, 30 Oct 2013 18:52:55 +0000 (14:52 -0400)]
fix inttypes.h PRI and SCN macros for [u]intptr_t types
while using "l" unconditionally gave the right behavior due to
matching sizes/representations, it was technically UB and produced
compiler warnings with format string checking.
Szabolcs Nagy [Tue, 29 Oct 2013 20:25:11 +0000 (20:25 +0000)]
POSIX conformance fix: define struct entry in search.h
Szabolcs Nagy [Mon, 28 Oct 2013 20:33:54 +0000 (20:33 +0000)]
fenv: fix i386 fesetround for sse
i386 fenv code checks __hwcap for sse support, but in fesetround the sse
code was unconditionally jumped over after the test so the sse rounding
mode was never set.
Szabolcs Nagy [Mon, 28 Oct 2013 01:16:14 +0000 (01:16 +0000)]
math: extensive log*.c cleanup
The log, log2 and log10 functions share a lot of code and to a lesser
extent log1p too. A small part of the code was kept separately in
__log1p.h, but since it did not capture much of the common code and
it was inlined anyway, it did not solve the issue properly. Now the
log functions have significant code duplication, which may be resolved
later, until then they need to be modified together.
logl, log10l, log2l, log1pl:
* Fix the sign when the return value should be -inf.
* Remove the volatile hack from log10l (seems unnecessary)
log1p, log1pf:
* Change the handling of small inputs: only |x|<2^-53 is special
(then it is enough to return x with the usual subnormal handling)
this fixes the sign of log1p(0) in downward rounding.
* Do not handle the k==0 case specially (other than skipping the
elaborate argument reduction)
* Do not handle 1+x close to power-of-two specially (this code was
used rarely, did not give much speed up and the precision wasn't
better than the general)
* Fix the correction term formula (c=1-(u-x) was used incorrectly
when x<1 but (double)(x+1)==2, this was not a critical issue)
* Use the exact same method for calculating log(1+f) as in log
(except in log1p the c correction term is added to the result).
log, logf, log10, log10f, log2, log2f:
* Use double_t and float_t consistently.
* Now the first part of log10 and log2 is identical to log (until the
return statement, hopefully this makes maintainence easier).
* Most special case formulas were removed (close to power-of-two and
k==0 cases), they increase the code size without providing precision
or performance benefits (and obfuscate the code).
Only x==1 is handled specially so in downward rounding mode the
sign of zero is correct (the general formula happens to give -0).
* For x==0 instead of -1/0.0 or -two54/0.0, return -1/(x*x) to force
raising the exception at runtime.
* Arg reduction code is changed (slightly simplified)
* The thresholds for arg reduction to [sqrt(2)/2,sqrt(2)] are now
consistently the [0x3fe6a09e00000000,0x3ff6a09dffffffff] and the
[0x3f3504f3,0x3fb504f2] intervals for double and float reductions
respectively (the exact threshold values are not critical)
* Remove the obsolete comment for the FLT_EVAL_METHOD!=0 case in log2f
(The same code is used for all eval methods now, on i386 slightly
simpler code could be used, but we have asm there anyway)
all:
* Fix signed int arithmetics (using unsigned for bitmanipulation)
* Fix various comments
Rich Felker [Fri, 25 Oct 2013 18:15:08 +0000 (14:15 -0400)]
add legacy ftime function and sys/timeb.h
despite being marked legacy, this was specified by SUSv3 as part of
the XSI option; only the most recent version of the standard dropped
it. reportedly there's actual code using it.
Szabolcs Nagy [Wed, 23 Oct 2013 01:49:14 +0000 (01:49 +0000)]
fix inet_pton
* parse IPv4 dotted-decimal correctly (without strtoul, no leading zeros)
* disallow single leading ':' in IPv6 address
* allow at most 4 hex digits in IPv6 address (according to RFC 2373)
* have enough hex fields in IPv4 mapped IPv6 address
* disallow leading zeros in IPv4 mapped IPv6 address
Szabolcs Nagy [Tue, 22 Oct 2013 12:28:17 +0000 (12:28 +0000)]
fix __ipparse to parse the generic numbers-and-dots IPv4 format correctly
* allow at most 4 parts
* bounds check the parts correctly
* disallow leading whitespace and sign
* check the address family before falling back to IPv6
Szabolcs Nagy [Tue, 22 Oct 2013 12:23:17 +0000 (12:23 +0000)]
fix inet_aton to accept the generic "numbers-and-dots" IPv4 address format
Rich Felker [Tue, 22 Oct 2013 02:05:29 +0000 (22:05 -0400)]
split inet_addr and inet_ntoa back into their own files
despite being practically deprecated, these functions are still part
of the standard and thus cannot reside in a file that also contains
namespace pollution. this reverts some of the changes made in commit
e40f48a421a9176e3e298b5bac75f0355b219e58.
Rich Felker [Mon, 21 Oct 2013 02:01:51 +0000 (22:01 -0400)]
fix multiple minor namespace issues in headers
fcntl.h: AT_* is not a reserved namespace so extensions cannot be
exposed by default.
langinfo.h: YESSTR and NOSTR were removed from the standard.
limits.h: NL_NMAX was removed from the standard.
signal.h: the conditional for NSIG was wrongly checking _XOPEN_SOURCE
rather than _BSD_SOURCE. this was purely a mistake; it doesn't even
match the commit message from the commit that added it.
Rich Felker [Sun, 20 Oct 2013 02:36:30 +0000 (22:36 -0400)]
fix return value for inet_pton in ipv6 failure cases
in the case of input that does not match the expected form, the
correct return value is 0, not -1.
Szabolcs Nagy [Fri, 18 Oct 2013 15:21:36 +0000 (15:21 +0000)]
use consistent include guard name in arpa/ftp.h
Szabolcs Nagy [Fri, 18 Oct 2013 15:19:49 +0000 (15:19 +0000)]
fix typo in socket.h (wrong macro name)
Rich Felker [Fri, 18 Oct 2013 11:12:38 +0000 (07:12 -0400)]
in faccessat slow path, add close-on-exec to pipe fds
as usual, this is needed to avoid fd leaks. as a better solution, the
use of fds could possibly be replaced with mmap and a futex.
Rich Felker [Sat, 12 Oct 2013 23:50:09 +0000 (19:50 -0400)]
fix uid/gid-setting error in faccessat with AT_EACCESS flag
this fixes an issue reported by Daniel Thau whereby faccessat with the
AT_EACCESS flag did not work in cases where the process is running
suid or sgid but without root privileges. per POSIX, when the process
does not have "appropriate privileges", setuid changes the euid, not
the real uid, and the target uid must be equal to the current real or
saved uid; if this condition is not met, EPERM results. this caused
the faccessat child process to fail.
using the setreuid syscall rather than setuid works. POSIX leaves it
unspecified whether setreuid can set the real user id to the effective
user id on processes without "appropriate privileges", but Linux
allows this; if it's not allowed, there would be no way for this
function to work.
Rich Felker [Tue, 8 Oct 2013 23:49:10 +0000 (19:49 -0400)]
fix errno value for getcwd when size argument is zero
based on patch by Michael Forney. at the same time, I've changed the
if branch to be more clear, avoiding the comma operator.
the underlying issue is that Linux always returns ERANGE when size is
too short, even when it's zero, rather than returning EINVAL for the
special case of zero as required by POSIX.
Szabolcs Nagy [Mon, 7 Oct 2013 18:46:43 +0000 (18:46 +0000)]
Szabolcs Nagy [Mon, 7 Oct 2013 18:41:03 +0000 (18:41 +0000)]
math: use sqrtl if FLT_EVAL_METHOD==2 in acosh and acoshf
this makes acosh slightly more precise around 1.0 on i386
Szabolcs Nagy [Mon, 7 Oct 2013 13:28:03 +0000 (13:28 +0000)]
fix clockid macro names in time.h, reported by Paul Schutte
Szabolcs Nagy [Mon, 7 Oct 2013 13:26:51 +0000 (13:26 +0000)]
remove errno setting from setenv, malloc sets it correctly on oom
Szabolcs Nagy [Mon, 7 Oct 2013 13:25:19 +0000 (13:25 +0000)]
fix allocation sizes in regcomp
sizeof had incorrect argument in a few places, the size was always
large enough so the issue was not critical.
Szabolcs Nagy [Mon, 7 Oct 2013 13:24:00 +0000 (13:24 +0000)]
add missing va_end in execl* for correcness and static code analyzers
Szabolcs Nagy [Mon, 7 Oct 2013 13:22:24 +0000 (13:22 +0000)]
minor vfprintf and vfwprintf changes to please static code analyzers
add missing va_end and remove some unnecessary code.
Szabolcs Nagy [Sun, 6 Oct 2013 02:09:40 +0000 (02:09 +0000)]
math: remove an unused variable from modfl
Rich Felker [Sat, 5 Oct 2013 16:00:55 +0000 (12:00 -0400)]
slightly optimize __brk for size
there is no reason to check the return value for setting errno, since
brk never returns errors, only the new value of the brk (which may be
the same as the old, or otherwise differ from the requested brk, on
failure).
it may be beneficial to eventually just eliminate this file and make
the syscalls inline in malloc.c.
Rich Felker [Sat, 5 Oct 2013 15:59:21 +0000 (11:59 -0400)]
fix failure of malloc to set errno on heap (brk) exhaustion
I wrongly assumed the brk syscall would set errno, but on failure it
returns the old value of the brk rather than an error code.
Rich Felker [Fri, 4 Oct 2013 19:49:55 +0000 (15:49 -0400)]
fix failure to check malloc result in setenv
Szabolcs Nagy [Fri, 4 Oct 2013 18:10:17 +0000 (18:10 +0000)]
math: remove code duplication in erfl found by clang analyzer
erfl had some superflous code left around after the last erf cleanup.
the issue was reported by Alexander Monakov
Szabolcs Nagy [Fri, 4 Oct 2013 18:08:16 +0000 (18:08 +0000)]
math: remove a useless assignment in lgammal found by clang analyzer
the issue was reported by Alexander Monakov
Rich Felker [Fri, 4 Oct 2013 05:06:42 +0000 (01:06 -0400)]
fix invalid implicit pointer conversion in pthread_key_create
Rich Felker [Fri, 4 Oct 2013 04:29:58 +0000 (00:29 -0400)]
fix uninitialized variable in dladdr
the affected branch only applies for DSOs that lack standard hash
table and only have the GNU hash table present.
Rich Felker [Fri, 4 Oct 2013 04:14:57 +0000 (00:14 -0400)]
removed unused variable in vfwprintf
Rich Felker [Thu, 3 Oct 2013 14:16:01 +0000 (10:16 -0400)]
fix new environment always being null with execle
the va_arg call for the argv[]-terminating null pointer was missing,
so this pointer was being wrongly used as the environment pointer.
issue reported by Timo Teräs. proposed patch slightly modified to
simplify the resulting code.
Rich Felker [Sun, 29 Sep 2013 06:52:33 +0000 (02:52 -0400)]
fix off-by-one error in getgrnam_r and getgrgid_r, clobbering gr_name
bug report and patch by Michael Forney. the terminating null pointer
at the end of the gr_mem array was overwriting the beginning of the
string data, causing the gr_name member to always be a zero-length
string.
Rich Felker [Fri, 27 Sep 2013 17:09:46 +0000 (13:09 -0400)]
fix buffer overflow in mbsrtowcs
issue reported by Michael Forney:
"If wn becomes 0 after processing a chunk of 4, mbsrtowcs currently
continues on, wrapping wn around to -1, causing the rest of the string
to be processed.
This resulted in buffer overruns if there was only space in ws for wn
wide characters."
the original patch submitted added an additional check for !wn after
the loop; to avoid extra branching, I instead just changed the wn>=4
check to wn>=5 to ensure that at least one slot remains after the
word-at-a-time loop runs. this should not slow down the tail
processing on real-world usage, since an extra slot that can't be
processed in the word-at-a-time loop is needed for the null
termination anyway.