| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | implement POSIX asynchronous io•••some features are not yet supported, and only minimal testing has been
performed. should be considered experimental at this point.
| Rich Felker | 2011-09-09 | 7 | -0/+338 |
| * | fix incorrect overflow errors on strtoul, etc. | Rich Felker | 2011-09-05 | 4 | -8/+20 |
| * | strptime: fix use of uninitialized dest field in converting integer | Rich Felker | 2011-09-05 | 1 | -1/+1 |
| * | more fmemopen null termination fixes•••null termination is only added when current size grows.
in update modes, null termination is not added if it does not fit
(i.e. it is not allowed to clobber data).
these rules make very little sense, but that's how it goes..
| Rich Felker | 2011-09-04 | 1 | -2/+3 |
| * | fix some fmemopen behaviors•••read should not be allowed past "current size".
append mode should write at "current size", not buffer size.
null termination should not be written except when "current size" grows.
| Rich Felker | 2011-09-04 | 1 | -4/+7 |
| * | handle pending cancellation when enabling async cancellation•••this is not strictly required by the standard, but without it, there
is a race condition where cancellation arriving just before async
cancellation is enabled might not be acted upon. it is impossible for
a conforming application to work around this race condition since
calling pthread_testcancel after setting async cancellation mode is
not allowed (pthread_testcancel is not specified to be
async-cancel-safe). thus the implementation should be responsible for
eliminating the race, from a quality-of-implementation standpoint.
| Rich Felker | 2011-09-04 | 1 | -0/+1 |
| * | fmemopen: fix eof handling, hopefully right this time | Rich Felker | 2011-09-04 | 1 | -3/+4 |
| * | fmemopen fixes•••disallow seek past end of buffer (per posix)
fix position accounting to include data buffered for read
don't set eof flag when no data was requested
| Rich Felker | 2011-09-04 | 1 | -1/+3 |
| * | memstreams: fix incorrect handling of file pos > current size•••the addition is safe and cannot overflow because both operands are
positive when considered as signed quantities.
| Rich Felker | 2011-09-04 | 2 | -4/+4 |
| * | optimize seek function for memory streams | Rich Felker | 2011-09-04 | 2 | -24/+6 |
| * | fix twos complement overflow bug in mem streams boundary check•••the expression -off is not safe in case off is the most-negative
value. instead apply - to base which is known to be non-negative and
bounded within sanity.
| Rich Felker | 2011-09-04 | 2 | -2/+2 |
| * | implement fmemopen•••testing so far has been minimal. may need further work.
| Rich Felker | 2011-09-03 | 1 | -18/+66 |
| * | fix some length calculations in memory streams | Rich Felker | 2011-09-03 | 2 | -3/+3 |
| * | implement open_wmemstream•••not heavily tested, but it seems to be correct, including the odd
behavior that seeking is in terms of wide character count. this
precludes any simple buffering, so we just make the stream unbuffered.
| Rich Felker | 2011-09-03 | 1 | -0/+95 |
| * | fix RTLD_NEXT on x86_64•••the return address was being truncated to 32 bits, preventing the
dlsym code from determining which module contains the calling code.
| Rich Felker | 2011-09-03 | 1 | -1/+1 |
| * | implement open_memstream•••this is the first attempt, and may have bugs. only minimal testing has
been performed.
| Rich Felker | 2011-09-03 | 1 | -0/+94 |
| * | fix missing prototypes/wrong signature for psiginfo, psignal | Rich Felker | 2011-09-02 | 1 | -1/+1 |
| * | bring back ___environ symbol (3 underscores)•••its existence doesn't hurt anything, and dynamic-linked binaries using
previous versions of musl were wrongly binding to it instead of
__environ.
| Rich Felker | 2011-08-23 | 1 | -0/+1 |
| * | use new a_crash() asm to optimize double-free handler.•••gcc generates extremely bad code (7 byte immediate mov) for the old
null pointer write approach. it should be generating something like
"xor %eax,%eax ; mov %al,(%eax)". in any case, using a dedicated
crashing opcode accomplishes the same thing in one byte.
| Rich Felker | 2011-08-23 | 1 | -2/+2 |
| * | security hardening: ensure suid programs have valid stdin/out/err•••this behavior (opening fds 0-2 for a suid program) is explicitly
allowed (but not required) by POSIX to protect badly-written suid
programs from clobbering files they later open.
this commit does add some cost in startup code, but the availability
of auxv and the security flag will be useful elsewhere in the future.
in particular auxv is needed for static-linked vdso support, which is
still waiting to be committed (sorry nik!)
| Rich Felker | 2011-08-23 | 4 | -15/+42 |
| * | in pathconf, -1, not 0, means unsupported.. syncio presumably works, too. | Rich Felker | 2011-08-16 | 1 | -3/+3 |
| * | fix bogus pathconf result for file size bits | Rich Felker | 2011-08-16 | 1 | -1/+1 |
| * | partially working strptime•••it's missing at least:
- derived fields
- week numbers
- short year (without century) support
- locale modifiers
| Rich Felker | 2011-08-16 | 1 | -148/+149 |
| * | ldso: move the suid/secure check code closer to env/auxv processing•••this does not change behavior, but the idea is to avoid letting other
code build up between these two points, whereby the environment
variables might get used before security it checked.
| Rich Felker | 2011-08-16 | 1 | -7/+7 |
| * | honor AT_SECURE aux vector flag | Rich Felker | 2011-08-16 | 1 | -2/+2 |
| * | RTLD_NEXT support•••the asm wrapper is needed to get the return address without
compiler-specific extensions.
| Rich Felker | 2011-08-16 | 4 | -3/+32 |
| * | LD_PRELOAD support | Rich Felker | 2011-08-16 | 1 | -0/+20 |
| * | simplify and improve double-free check•••a valid mmapped block will have an even (actually aligned) "extra"
field, whereas a freed chunk on the heap will always have an in-use
neighbor.
this fixes a potential bug if mmap ever allocated memory below the
main program/brk (in which case it would be wrongly-detected as a
double-free by the old code) and allows the double-free check to work
for donated memory outside of the brk area (or, in the future,
secondary heap zones if support for their creation is added).
| Rich Felker | 2011-08-15 | 1 | -2/+2 |
| * | macro for pthread_equal•••no sense bloating apps with a function call for an equality comparison...
| Rich Felker | 2011-08-14 | 1 | -1/+1 |
| * | fix missing include in last commit | Rich Felker | 2011-08-13 | 1 | -0/+1 |
| * | fix clock() function•••it previously was returning the pseudo-monotonic-realtime clock
returned by times() rather than process cputime. it also violated C
namespace by pulling in times().
we now use clock_gettime() if available because times() has
ridiculously bad resolution. still provide a fallback for ancient
kernels without clock_gettime.
| Rich Felker | 2011-08-13 | 1 | -2/+7 |
| * | implement forkall•••this is a "nonstandard" function that was "rejected" by POSIX, but
nonetheless had its behavior documented in the POSIX rationale for
fork. it's present on solaris and possibly some other systems, and
duplicates the whole calling process, not just a single thread. glibc
does not have this function. it should not be used in programs
intending to be portable, but may be useful for testing,
checkpointing, etc. and it's an interesting (and quite small) example
of the usefulness of the __synccall framework originally written to
work around deficiencies in linux's setuid syscall.
| Rich Felker | 2011-08-12 | 1 | -0/+66 |
| * | pthread and synccall cleanup, new __synccall_wait op•••fix up clone signature to match the actual behavior. the new
__syncall_wait function allows a __synccall callback to wait for other
threads to continue without returning, so that it can resume action
after the caller finishes. this interface could be made significantly
more general/powerful with minimal effort, but i'll wait to do that
until it's actually useful for something.
| Rich Felker | 2011-08-12 | 4 | -7/+13 |
| * | more efficient signal blocking for timer threads•••due to the barrier, it's safe just to block signals in the new thread,
rather than blocking and unblocking in the parent thread.
| Rich Felker | 2011-08-12 | 1 | -4/+4 |
| * | normal exit from timer thread should run dtors, restore cancel state | Rich Felker | 2011-08-11 | 1 | -1/+1 |
| * | block signals in timer threads•••if a timer thread leaves signals unblocked, any future attempt by the
main thread to prevent the process from being terminated by blocking
signals will fail, since the signal can still be delivered to the
timer thread.
| Rich Felker | 2011-08-11 | 1 | -0/+4 |
| * | condition variable signal/bcast need not wake unless there are waiters | Rich Felker | 2011-08-07 | 2 | -4/+4 |
| * | use weak aliase rather than weak reference for vdso clock_gettime•••this works around pcc's lack of working support for weak references,
and in principle is nice because it gets us back to the stage where
the only weak symbol feature we use is weak aliases, nothing else.
having fewer dependencies on fancy linker features is a good thing.
| Rich Felker | 2011-08-07 | 1 | -8/+12 |
| * | simplify unified timed wait code, drop support for newer method•••the new absolute-time-based wait kernelside was hard to get right and
basically just code duplication. it could only improve "performance"
when waiting, and even then, the improvement was just slight drop in
cpu usage during a wait.
actually, with vdso clock_gettime, the "old" way will be even faster
than the "new" way if the time has already expired, since it will not
invoke any syscalls. it can determine entirely in userspace that it
needs to return ETIMEDOUT.
| Rich Felker | 2011-08-07 | 1 | -31/+28 |
| * | add fast path for normal mutexes back to pthread_mutex_lock | Rich Felker | 2011-08-07 | 1 | -0/+3 |
| * | close should not be cancellable after "failing" with EINTR•••normally we allow cancellation to be acted upon when a syscall fails
with EINTR, since there is no useful status to report to the caller in
this case, and the signal that caused the interruption was almost
surely the cancellation request, anyway.
however, unlike all other syscalls, close has actually performed its
resource-deallocation function whenever it returns, even when it
returned an error. if we allow cancellation at this point, the caller
has no way of informing the program that the file descriptor was
closed, and the program may later try to close the file descriptor
again, possibly closing a different, newly-opened file.
the workaround looks ugly (special-casing one syscall), but it's
actually the case that close is the one and only syscall (at least
among cancellation points) with this ugly property.
| Rich Felker | 2011-08-07 | 1 | -1/+2 |
| * | simplify multi-threaded errno, eliminate useless function pointer | Rich Felker | 2011-08-06 | 3 | -12/+5 |
| * | use weak aliases rather than function pointers to simplify some code | Rich Felker | 2011-08-06 | 6 | -9/+20 |
| * | fix off-by-one bug in siglongjmp that caused unpredictable behavior•••if saved, signal mask would not be restored unless some low signals
were masked. if not saved, signal mask could be wrongly restored to
uninitialized values. in any, wrong mask would be restored.
i believe this function was written for a very old version of the
jmp_buf structure which did not contain a final 0 field for
compatibility with siglongjmp, and never updated...
| Rich Felker | 2011-08-05 | 1 | -1/+1 |
| * | further debloat cancellation handlers•••cleanup push and pop are also no-ops if pthread_exit is not reachable.
this can make a big difference for library code which needs to protect
itself against cancellation, but which is unlikely to actually be used
in programs with threads/cancellation.
| Rich Felker | 2011-08-03 | 4 | -17/+30 |
| * | missed detail in cancellation bloat fix | Rich Felker | 2011-08-03 | 1 | -1/+1 |
| * | fix static linking dependency bloat with cancellation•••previously, pthread_cleanup_push/pop were pulling in all of
pthread_create due to dependency on the __pthread_unwind_next
function. this was not needed, as cancellation cleanup handlers can
never be called unless pthread_exit or pthread_cancel is reachable.
| Rich Felker | 2011-08-03 | 5 | -14/+21 |
| * | implement if_nameindex and if_freenameindex | Rich Felker | 2011-08-03 | 2 | -0/+65 |
| * | overhaul rwlocks to address several issues•••like mutexes and semaphores, rwlocks suffered from a race condition
where the unlock operation could access the lock memory after another
thread successfully obtained the lock (and possibly destroyed or
unmapped the object). this has been fixed in the same way it was fixed
for other lock types.
in addition, the previous implementation favored writers over readers.
in the absence of other considerations, that is the best behavior for
rwlocks, and posix explicitly allows it. however posix also requires
read locks to be recursive. if writers are favored, any attempt to
obtain a read lock while a writer is waiting for the lock will fail,
causing "recursive" read locks to deadlock. this can be avoided by
keeping track of which threads already hold read locks, but doing so
requires unbounded memory usage, and there must be a fallback case
that favors readers in case memory allocation failed. and all of this
must be synchronized. the cost, complexity, and risk of errors in
getting it right is too great, so we simply favor readers.
tracking of the owner of write locks has been removed, as it was not
useful for anything. it could allow deadlock detection, but it's not
clear to me that returning EDEADLK (which a buggy program is likely to
ignore) is better than deadlocking; at least the latter behavior
prevents further data corruption. a correct program cannot invoke this
situation anyway.
the reader count and write lock state, as well as the "last minute"
waiter flag have all been combined into a single atomic lock. this
means all state transitions for the lock are atomic compare-and-swap
operations. this makes establishing correctness much easier and may
improve performance.
finally, some code duplication has been cleaned up. more is called
for, especially the standard __timedwait idiom repeated in all locks.
| Rich Felker | 2011-08-03 | 8 | -60/+44 |
| * | timedwait: play it safe for now•••it's unclear whether EINVAL or ENOSYS is used when the operation is
not supported, so check for both...
| Rich Felker | 2011-08-03 | 1 | -1/+1 |
